Society's dependence on information systems.— As society moves toward 
electronic mail and other large extensively used information systems, 
likeiy new issues will concern the ways in which public policy can help 
balance the risks society may encounter versus the benefits, retain the 
option to end dependence on a particular system (avoid becoming 
"locked in"), and provide alternatives for those who prefer not to use 
electronic services. Research on the risks of system failure is needed, as is 
careful attention to how technology can be used to reduce these risks (for 
example, through distributed (lata bases and back-up computers). 
Constitutional rights —Little legal precedent exists, in many cases, for 
applying constitutional law to issues raised by computer-based informa- 
tion systems. Areas of constitutional rights that may be affected by in- 
formation systems include: freedom of speech and press (first amend- 
ment), protection against unreasonable search and seizure (fourth), pro- 
tection against self-incrimination and guarantee of due process of law 
(titth), right to a trial by impartial jury (sixth), and State guarantees of 
due process ;;nd equal protection of the laws ( 1 4th). 

iicgtJatury boundaries,— 'Evolving computer-based systems are crossing 
over and blurring traditional regulatory boundaries. Regulatory policy 
issues are likely to recur with respect to computer- v. communication- 
based services, electronic interstate branch banking, and electronic mail. 
As these systems expand geographically and move away from traditional 
definitions of industry structure, policy issues concerning interstate con- 
flict of laws, Federal-State relationships, and antitrust may also arise. 
Other issues —Four other issue areas were identified as important 
althougn not analyzed in great detail: computer crime, transborder data 
flow, information gap (for those who would be denied access due to tech- 
nological illiteracy or other reasons), and computer software protection. 
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Foreword 



This report presents the results of an overview study on the use of computer 
technology in national information systems and related public policy issues. The 
purposes of this study are: 

• To provide a general introduction to computer-based national informa- 
tion systems. —Will help acquaint the nonexpert reader with the nature 
of computer-based national information systems and the role they play in 
American society. 

• To provide a framework for understanding computer and information 
policy issues.— Develops a structure of info nation policy and presents 
brief essays on several of the more important isrue areas, with an em- 
phasis on how future applications of computer-based information 
systems may intensify or alter the character of the policy debate and the 
need for new or revised laws and policies. 

• To provide a state-of-the-art survey of computer and related technologies 
and industries. -Highlights recent developments in computer and in- 
formation technologies and describes the current status and likely evolu- 
tion of the computer and information industries. 

• To provide a foundation for other related studies. While some observa- 
tions can be made about national information systems in general, a full 
assessment of impacts and issues is best conducted in the context of 
specific systems. The report builds a foundation for three related OTA 
studies in the areas of computerized criminal history records, electronic 
mail, and electronic funds transfer. These three separate studies will be 
published later this year. 

As a set, the four studies comprise the OTA assessment of Societal Impacts 
of National Information Systems that was requested by the Senate Committee 
on the Judiciary, Hour e Committee on the Judiciary, and House Post Office and 
Civil Service Committee. Supporting requests were received from the House 
Government Operations Subcommittee on Government Information and Indi- 
vidual Rights and the House Science and Technology Subcommittee on Science, 
Research, and Technology. 

OTA appreciates the participation of the many advisory panelists and 
others who helped bring this study to completion. 
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Overview 



Computers have become a major technological tool of American society dur- 
ing the last quarter of a century. New developments in computer and com- 
munication technology promise within this decade an even more radical revolu- 
tion in the way that information is collected, stored, used, and disseminated. 

Large-scale integrated circuit technology, for example, allows hundreds of 
thousands of electronic components to be fabricated on a thin wafer smaller than 
a paper clip, thereby providing computing capability hundreds of times less ex- 
pensive, less energy-consuming, and more reliable than was ava'lable only two 
or three decades ago. One result is the rapid growth in small, inexpensive com- 
puters that are the equivalent of machines selling for as much as a million dollars 
in the 1950s. Data communic tion networks using satellite and microwave tech- 
nologies make it possible to provide access economically to large data bases 
from anywhere in the country or the world. Thus, networks of remotely sited 
computers can provide services such as credit card and check authorization or 
airline scheduling to users nationwide. 

As these and other computer-based information systems— such as those 
used in air traffic control, military command and control, and electronic funds 
transfer— become more important to American society, they create correspond- 
ing public policy issues. Among the most important issues are the following: 

• Innovation, productivity, and employment. —Continued innovation in in- 
formation technology is a prime requisite for a healthy information in- 
dustry and also offers the tools for improving the productivity of many 
other sectors of the economy. Likely policy issues include: support for 
research and development on civilian applications of computer tech- 
nology, vitality of academic computer science, suppc-l ibr computer im- 
pact research (e.g., the impact on employment), and maintaining U.S. in- 
ternational competitiveness in computers and information systems. 

• Privacy.— New applications of computer and communication tech- 
nology— e.g., an automated securities exchange, in-home information 
services, electronic publishing, and the automated office— may generate 
issues over secondary use of personal information, surveillance, and the 
possible need for new approaches to privacy policy. 

• Security.— The technology for securing computer systems from theft, 
sabotage, natural hazards, privacy abuses, and the like is improving 
steadily. However, the increasingly complicated systems now being 
designed and built make secure operations more difficult and suggest 
likely issues concerning the adequate protection of Federal information 
systems and vital non-Federal systems, and the development of the 
necessary data security and cryptographic capability. 

• (rovernme.it management of data processing. — It appears that, in gen- 
eral, the Federal Government is rapidly falling behind the private sector 
in its use and management of up-to-date computer and information tech- 
nology. The 96th Congress enacted Public Law 96-511 (Paperwork 
Reduction Act of 1980) to help address this problem. And other issues 
may arise with respect to the effects of large-scale information systems 
on Federal decisionmaking (the "automated bureaucracy") and the proc- 
ess by which social values are reflected in information system design. 
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IX 



Society's dependence on information systems.— As society moves toward 
eleitronie mail and other large extensively used information systems, 
likfiv new issues will concern the ways in which public policy can help 
balance the risks society may encounter versus the benefits, retain the 
option to end dependence on a particular system (avoid becoming 
"locked in"), and provide alternatives for those who prefer not to use 
electronic services. Research on the risks of system failure is needed, as is 
careful attention to how technology can be used to reduce these risks (for 
example, through distributed uata bases and back-up computers). 
Constitutional rights —Little legal precedent exists, in many cases, for 
applying constitutional law to issues raised by computer-based informa- 
tion systems. Areas of constitutional rights that may be affected by in- 
formation systems include: freedom of speech and press (first amend- 
ment), protection against unreasonable search and seizure (fourth), pro- 
tection against self-incrimination and guarantee of due process of law 
(fifth), right to a trial by impartial jury (sixth), and State guarantees of 
due process ;;nd equal protection of the laws (14th), 

Regulatory boundaries. — Evolving computer-based systems are crossing 
over and blurring traditional regulatory boundaries. Regulatory policy 
issues are likely to recur with respect to computer- v'. communication- 
based services, electronic interstate branch banking, and electronic mail. 
As these systems expand geographically and move away from traditional 
definitions of industry structure, policy issues concerning interstate con- 
flict of laws, Federal-State relationships, and antitrust may also arise. 
Other issues — Four other issue areas were identified as important 
although not analyzed in great detail: computer crime, transborder data 
flow, information gap (for those who would be denied access due to tech- 
nological illiteracy or other reasons), and computer software protection. 



C) 



'hapter 1 



Contents 



r _■« 

Introduction . 3 

Computers and Information S\ stems A 

National Information Systems . 5 

Purpose and Limitations ot theStudv . (> 

Computers, Information S\ stems, and Societ\ s 

Nature of Computer-Based Information System*. ^ 

Future Trends tn Computer-Based 1 ntormation S\ stem** . 9 

The Computer-Based Information Society ... 12 

The Structure ot 1 ntormation Policy Issues .... 13 

Information Pohe\ . Law, and Regulation . 13 

System Issues . . ... 14 

Information Issues . . . If) 

Secondare Policy Impacts , .16 

Long-Term Societal Kttects . lb 

Public Policy Issuk- . . ... . . Hi 

Innw\atu>n. Product i\ its . and Kmplo\ment , . 1H 

Privacy . . IS 

Security . . . , .19 

Government Management of Data Processing . ... , . 20 

Society's Dependence on Information Systems. . . 21 

Constitutional Rights . . 22 

Regulatory Boundaries . . ..... . . 21 

Other Issues . . . , . ... 24 

TABLE 

/.W, \ ■ Pail? 

1 Structure of Information Policy Issues , , 14 

LIST OF FIGURES 

1 The One-Chip Computer: Offspring of the Transistor. . , 3 

2 Drop in Average Computer System Cost per 100,000 Calculations 

From 1952-80 4 

3. increase in Capability of Semiconductor Chips From 1956-80. .... ..... 4 

4. Computer Technology in a National Information System 6 

5 Communication Technology in a National Information S> stem 7 

b\ Four Sector Aggregation of the U.S. Work Force by Percent, 1880-1980 . . 13 
7 Val»o Triad of information* Conflict and Competition Among Private, 

Commercial, and Public Value . ... 15 



ERIC 



Chapter 1 

Summary 



Introduction 



Computers and Information 
Systems 

Computerr have become a major tech- 
nological tool of American society dui ; ng the 
past quarter of a century. New develop- 
ments in computer and communication tech- 
nology promise within this decade an even 
more radical revolution in the way that in- 
formation is collected, stored, used, and 
disseminated. 



Large-scale integrated circuit technology 
allows hundreds of thousands of electronic 
components to be fabricated on a thin silicon 
wafer smaller than a paper clip (see fig. 1) 
thus providing computing capability hun- 
dreds of times less expensive, less energy- 
consuming, and more reliable than was avail- 
able only two or three decades ago, as shown 
in rigure 2. Because these microelectronic 
devices are changing the economics of com- 
puter access and use, thay pre dramatically 



igure 1 —The One-Chip Computer: Offspring of the Transistor 




(>ho'<> r r ,*c<,t Beit Ldbs 

The MAC 4 one-ch-p computer developed for a variety of telecommunications apphcat.ons. ,s comparPd 
to a standard sized paper clip The chip s numerous functional areas are labeled 
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Figure 2. —Drop in Average Computer System 
Cost per 100,000 Calculations From 1952-80 
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affecting the ways in which computers are 
used, and who is using them. 

This change has been accompanied by 
equally rapid improvement in communica- 
tion technology.* New telecommunication 
technologies such as direct satellite broad- 
casting, local area distribution cables, and 
long-distance data communication networks 
allow computers to be used in ways that 
were unimagined a decade ago. Although ini- 
tially distinctly different, computer and com- 
munication technologies are increasingly 
interdependent, and are being combined 10 
form new products and services and to 
change the nature of information systems in 
several ways: 



*The development of (ommunitutmn technology is ex 
a mined in detail n theOTA report. VV/er om mum rat tort rah 
no/otf v cui f*ubli( /Wrr v, in press 



Computers are becoming smaller and 
less expensive, thereby increasing their 
range of applications. Today, computer 
logic is even being built into common 
devices such as ovens and automobile 
carburetors, and complete small com- 
puter systems are being sold through 
consumer retail outlets at a price 
equivalent to a first-rate high-fidelity 
stereo set. Al the center of this trans- 
formation is the integrated circuit chip, 
a tiny device capable of containing an 
entire computer system. The increasing 
capability of these circuit chips is 
shown in figure 3. As a result, the large 
computer that occupied one or several 
rooms in the late 1960 s will soon fit in a 
desk drawer, and a medium-size com- 
puter will fit in a briefcase or even a coat 
pocket. 

Computers can be connected inexpen- 
sively to communication lines making it 
possible to provide access economically 
to large computer data bases from any- 



rigure 3.— Increase in Capa** A y of 
Semiconductor Chips From 6-80 
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where in the country or the world. Net- 
works of remotely sited computers pro- 
vide services such as credit card and 
check authorization or airline schedul- 
ing to users nationwide. 

• Techniques for the organization and 
display of information are improving as 
are methods of instructing the com- 
puter to perform its tasks, thus making 
it easier for nonexperts to obtain usable 
information. 

• Information storage technology which 
is less costly and more compact makes 
it feasible to store large amounts of in- 
formation for long periods of time in 
electronic form. In many cases it costs 
less for electronic storage than to main- 
tain paper records, and access to spe- 
cific items is faster and more accurate. 

National Information Systems 

The focus of this study is on national in- 
formation systems that are made possible by 
advances in computer and communication 
technology. 

The term "national information systems" 
as used here means systems that: are sub- 
stantially national in geographic scope (i e , 
multistate); are organized by Government or 
private organizations or groups to collect, 
store, manipulate, and disseminate informa- 
tion about persons and/or institutions; and 
are in some significant manner based on 
computers and related information and com 
munication techno' ,gy. 

Furthermore, the focus is primarily on 
large, interconnected national systems 
where a substantial national interest is in- 
volved (e.g., in the financial, postal, military, 
and air traffic safety areas). Examples of 
such systems include: 

f ihe^mputer-based National Crime In- 
formation Center operated by the Fed- 
eral Bureau of Investigation; 

• the FEDWIRE electronic funds trans- 
fer network operated by the Federal Re- 
serve System; 



• the nationwide electronic mail services 
operated by several private firms and 
soon to involve the U.S. Postal Service; 

• the nationwide computer-based credit 
card and check authorization services 
(e.g., VISA, American Express, Master- 
Card, Telecheck, Telecredit); 

• the computerized air traffic control 
system operated by the Federal Avia- 
tion Administration; 

• the computerized military command 
and control systems operated by the 
Department of Defense; 

• the nationwide computer-based airline 
reservation systems operated by major 
air carriers (e.g., United, TWA, Amer- 
ican); and 

• the computerized automatic quotation 
system for obtaining over-the-counter 
stock prices operated by the National 
Association of Securities Dealers. 

A secondary focus of the study is on the 
use of personal computers* when intercon- 
nected as part of a larger network. For exam- 
ple, MicroNet and The Source are new serv- 
ices designed to link owners of personal com- 
puters with each other and with larger com- 
puters, data banks, and information proc- 
essing services, over a nationwide network. 
Also, in the future, stand-alone computer 
games when combined, for instance, with a 
television set and a telephone will be able to 
serve as a terminal with similar access to a 
nationwide network. 

A typical national information system is 
illustrated in figures 4 and 5. In the example, 
there are seven cities (nodes) in the network: 
New York, Washington, D.C., Chicago, Dal- 
las. Atlanta, Los Angeles, and San Fran- 
cisco. Information (for instance, on inven- 
tory, sales, credit transactions, and the like) 
is stored by the headquarters office of a na- 
tional retail sales company in a central (host) 
computer in Dallas, as shown in figure 4. The 
regional offices also store information in 



Small but fully capable computers currently selling for 
several hundred to a few thousand dollars and designed for 
use by individuals in the home, business, or school 
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Figure 4.— Computer Technology in a National Information System (illustrative) 




their own minicomputers.* All terminals on 
the network can access the headquarters 
data base (in the host computer) and the re- 
gional data bases distributed around the 
country. The information is disseminated 
from one city to another via the satellite and 
microwave communication links illustrated 
in figure 5. 

This is an example of eurrert technology 
used by a growing number of private firms 
and some Government agencies in what is 
known as a "distributed data processing net- 
work." Distributed means that the data 
bases (and computer capability) can be in 
several locations (e.g., branches of a retail 
store as above, or regional offices of a Gov- 

♦Small computer s\ Merns mrrenth selling for under 
"CiO.000 

Id 
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ernment agency) rather than in one central 
computer. Furthermore, owners of a per 
sonal computer could plug into such a net- 
work, with the appropriate code words and 
authorization, via a telephone line (see fig. 4) 
in their own home or office and actually 
transact business by computer. 

Purpose and Limitations 
of the Study 

This overview study is intended to be a 
broad introductory examination oi com- 
puter-based national information systems 
and related technology and public policy 
issues that Congress is likely to face over the 
next few yeais. It will also serve as a founda- 
tion for the other OTA information systems 
studies and for future in-depth examination 
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of particular systems and issues. It also ex- 
amines the increasingly critical role that na- 
tional information systems play in society. 

It would not be possible for any one study 
to capture succinctly a single set of policy 
issues that would apply to all national in- 
formation systems in American society. The 
specific system applications are too diverse, 
the potentials and problems too complex, 
and the parties-at-interest and relevant in- 
stitutional and legal frameworks too dis- 
parate. Only a few of the many issues ex- 
amined in this study will be important for 
any particular system. 



Consequently, OTA is also conducting 
case studies of three specific national in- 
tormation systems: 

1 . an assessment of the National Crime In- 
formation Center Computerized Crim- 
inal History System; 

2. a preliminary assessment of the role of 
the U.S. Postal Service in electronic 
message systems; and 

3. a preliminary assessment of electronic 
funds transfer systems. 

These case studies will provide a more de- 
tailed look at the impacts and issues asso- 
ciated with a specific national information 
system 
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Computers, Information Systems, and Society 



Nature of Computer-Based 
Information Systems 

Traditionally, computers have been 
viewed as super calculators that automate 
processes that were previously performed by 
people sitting at mechanical adding ma- 
chines. However, computprs carry out a wide 
variety of tasks associated with processing 
information. It is important to understand 
the entire range of these capabilities in order 
to appreciate the nature and magnitude of 
the potential social impacts of tftis tech- 
nology when used in information systems. 

Computer capabilities fall into seven main 
categories; 

1. Data collection. When attached to var- 
ious sensing devices, computers can de- 
tect and measure such external physical 
phenomena as temperature, time, pres- 
sure, flow rate, or any number of other 
variables Also, computers can keep a 
record of transactions. For examp'e, a 
computerized cash register can collect 
and store information about a sale that 
includes bookkeeping entries, taxes, 
commissions and inventory, and can 
even reorder stock. Some computer- 
based door locks require individuals to 
carry magnetic identity cards. Such 
locks not only can control access but 
also can create a record of whose card 
was granted access, when, and for how 
long. 

Technological advances are beginning 
to provide computers with the ca- 
pability to directly process visual and 
audio input, thus greatly increasing 
their applicability to data collection. 
Computers already have a limited abili- 
ty to recognize human speech, to read 
directly a variety of typewritten forms 
and handprinted texts, and to detect 
patterns in video images. These func- 
tions will be improving rapidly over the 
next decade and will soon appear in 
commercial equipment. 



2. Information storage. Computers can 
store large amounts of information for 
long periods of time in an electronically 
readable form that is easily and quickly 
recoverable. Depending on the par- 
ticular application, the methods of 
storage vary widely, from signals in 
electronic circuitry, to magnetic pulses 
on tape, to holes in cards. New advances 
in memory technology eventually will 
allow trillions of characters of informa- 
tion to be stored conveniently and 
cheaply wherever there is even a small 
computer. The cost of storing informa- 
tion electronically will soon be substan- 
tially lower than the cost of storing the 
same amount of information on paper. 

3. Information organization. Computers 
can be used to rearrange information so 
that it is more suitable for particular ap- 
plications. For example, if the data in a 
telephone directory were stored in a 
computer s memory, it could be in- 
verted to allow ciie to look up a tele- 
phone number that corresponds to a 
particular address. More generally, 
computers can simplify and restructure 
vast amounts of raw data to assist peo- 
ple in drawing significant meanings or 
conclusions. 

4. Calculations. Computers perform arith- 
metic calculations millions of times 
faster than can human beings. They are 
used to make numerous simple calcula- 
tions, such as those required in proc- 
essing the payroll for a sizable or- 
ganization; to make sophisticated sta- 
tistical calculations on large amounts of 
data, such as those for social science re- 
search; or to perform nighly complex 
scientific calculations, such as those 
needed for weather research or for 
modeling fusion energy systems. 

5. Communication. Through connections 
over a communication system, com- 
puters can transmit data around the 
Nation and the world either to human 
users or to other computers, which per- 
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mits the sharing of work and data 
among groups of linked computers 
(known as computer networking). Pri- 
vate firms are beginning to offer special 
communication services to support 
computer networking. In addition, com- 
puters make possible the more effective 
use and management of the communica- 
tion systems themselves. 

6. Information presentation. Computers 
can put out information in a variety of 
forms. Through graphical display, and 
more recently through voice response, 
they can make data readily understand- 
able and useful to nonexperts. It is 
possible to display data and computer 
schematics on screens in a multicolored, 
three-dimensional format for design and 
analytical purposes. Also, data such as 
numbers and statistics can be organized 
by the computer in an easy-to-under- 
stand tabular presentation. Much of the 
programing effort in developing modern 
management information is directed 
toward designing ways in which the in- 
formation generated by the computer 
can be presented most clearly to the 
manager who needs it. 

7. Control Computers can be used to con- 
trol a machine tool or a production line 
without human intervention. Many con* 
gu mer devices - - mclu di ng mic r o wa ve 
ovens, automated home thermostats, 
automobile engines, television sets, and 
telephones— incorporate computer con- 
trols using new microprocessor technol- 
ogy. Such uses are increasing rapidly. 

Future Trends in Computer-Based 
Information Systems 

The use of computers during the 1980 s 
will likely follow the key trends discussed 
below and covered in depth in chapters 13 
and 14. 

• Growth in the use of personal computers. 
The small computer will become common 
both in the home and in business. Despite 
their small size, these systems will be 
highly capable— the equivalent of ma- 




Photo credit Texas Instruments, tnc 

INSIGHT Series 10 Personal Information Terminal Standing 
only 12 inches high with a 5 1 /2-inch swivel display screen 



chines that sold for as much as a million 
dollars in the 1950s. They may appear in 
the guise of video games, television sets, 
or telephones that will also have a com- 
puter capability available for other pur- 
poses. This trend will stimulate more 
widespread computer literacy in society, 
and in turn be reinforced by the conse- 
quent increase in the ability of people to 
program and use computers. The first 
generation to grow up with computers is 
now reaching maturity. These "computer 
literate" young adults accept computers 
as a natural part of their world. Computer 
design and use will be taught more both in 
school and as part of adult education, and 
will enhance an already thriving market 
for specialized application programs de- 
signed for small computers. 

• Expansion in the number and size of com- 
puter networks. By the end of the decade, 
most computers, even small ones, will be 
connected to a communication network at 
least part of the time. 

The communication system may be 
dedicated to a single application in which 
all the machines on the network perform 
portions of a larger task. Public data net- 
works, on the other hand, provide any 
home or business computer with access to 
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a wide range of data bases or special pro- 
grams that may be wanted for occasional 
use. Such multiuser national networks 
that can be interconnected now exist, and 
the number of users is expected to grow at 
a rapid rate. 
• The trend toward information services 
The computer industry has traditionally- 
been concerned with selling hardware 
(desktop, mini, and mainframe computers 
and related auxiliary equipment). How- 
ever, current trends in both pricing and 
the structure of the market are driving the 
emphasis toward providing computer- 
bared information services, such as bib- 
liographic and data base searches, elec- 
tronic publishing, electronic banking, and 
the like. A number of these services will 
still require that the user possess a com- 
puter. However, many will be offered over 
data communication lines to homes and of- 
fices, and will be accessible through a 
modified ("intelligent") telephone or tele- 
vision set. Examples include two-way 
cable television, videotext, and the AT&T 
Electronic Information Services experi- 
ment thpt provides an electronic tele- 
phone directory over a telephone line to a 
home terminal. Eventually, information 
services of all kinds will dominate the data 
processing market in terms of dollar 
volume. 

• The competition among giant corpora- 
tions for the data communication ^cri'iccs 
market IBM. AT&T, Exx'Mi. and GTE, 
among others, are preparing to offer a 
variety of data co» rnunication services. 
Large corporations Mich as these have ac- 
cess to the capital required to install the 
technological base for the planned serv- 
ices, such as communication satellite sys- 
tems and fiber optic transmission lines. A 
series of recent rulings by the FCC, some 
still under challenge, are intended to clear 
the way for open competition among these 
and other corporations to provide informa- 
tion services of all kinds over communica- 
tion lines. Resolution of the pending 
challenges by the courts or by Congress 
will have significant implications over the 



long term for the data communication in- 
dustry.* 

• Higher level integration of data services. 
Many individual networks for servicing 
specific corporate and governmental 
needs will continue to be built. Some of 
these networks will become integrated. 
For example, most airlines, car rental 
agencies, and large hotel chains have their 
own reservation systems. It is now tech- 
nically feasible to build an integrated 
system that would provide travel agents 
access to all of these reservation systems 
through one desktop terminal. 

Similar integrated information systems 
are also feasible in insurance, banking, 
travel, entertainment, law enforcement, 
commodities exchanges, medical services, 
and many other sectors that now use sev- 
eral separate information systems. How- 
ever, implementation of these systems will 
depend on perceived need, economic 
viability, and other related factors. 

• The software bottleneck. According to 
many computer and industry experts, the 
increasing capability of computer hard- 
ware is not being fully utilized due to prob- 
lems encountered in creating suitable soft- 
ware programs for these new machines. 
The major problems are the relatively 
slow increase in the productivity of pro- 
gramed— their cost efficiency— compared 
with that of the hardware, and the dif- 
ficulties encountered in managing large 
programing projects. 

These problems have created bottle- 
necks in the development of new applica- 
tions. Computer programing has been 
relatively resistant to productivity im- 
provement, at least when compared with 
corresponding improvements in hardware 
performance. Programing is by nature 
labor intensive. Its cost is rising due to 
the increased programing requirements of 
new hardware coupled with a shortage of 
programing personnel with the required 
training and experience. New mechanisms 

.Mir .nl<.(J Him u^ion -.«.. tl M »0'| \ report t»*hi»m*nu 
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such as structured programing will be 
helpful in engineering computer programs 
and managing their design and implemen- 
tation. 

At the other end of the scale, micro- 
technology is making possible enormous 
increases in computational power through 
the creation of new hardware structures 
from clusters of small computer chips. 
Technologists know how to physically 
construct such combinations, but not how 
to use them as effectively as their poten- 
tial would suggest. 



Eliminating software bottlenecks may 
be the key to maintaining the lead in com- 
puter technology in the coming decade. In 
Japan, for example, the software problem 
has now been given a very high priority 
for research and development (R&D). In 
the United States, although a few defense 
agencies are investing in research to solve 
some of the problems, Federal R&D budg- 
ets for computer science and technology 
have not accorded software a similar 
priority. Private industry is the source of 
most activity in this area. Reportedly, 
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one-third of the research effort at Bell 
Labs is devoted to the software problem. 

The Computer-Based * 
Information Society 

An information industry analyst recently 
observed that ' every society is an informa- 
tion society/ * That is, all human organiza- 
tions, no matter how simple, depend for their 
functioning on an intangible resource called 
"information." In any society, information 
serves several purposes. It can be, for exam- 
ple, a commodity of commerce, an indicator 
of wealth or power, a basis for making de- 
cisions, or a source of entertainment. 

Several key trends are transforming the 
United States into a computer-based in- 
formation society: 

• The tasks being undertaken by the large 
organizations that serve American soci- 
ety are growing in complexity. The air 
traffic control system handles nearly 20 
million flights yearly. Every year the 
financial system clears over 30 billion 
checks, the U.S. Postal Service delivers 
over 100 billion pieces of mail, and the 
Internal Revenue Service (IRS) receives 
more than 140 million tax returns. The 
use of computer-based systems is one 
way to cope with this vast and complex 
information flow. 

• Ihe sen ice sector of the economy is 
growing at a relatively faster rate than 
the industrial and agricultural sectors. 
Many services such as medicine, law, 
education, and Government involve the 
transfer of large amounts of informa- 
tion. Resistance to productivity im- 
provements in this sector, which rep- 
rese^t-- a large part of the economy, has 
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impeded overall productivity growth. 
Greater application of information tech- 
nology has been proposed as a chief 
remedy. For this reason, it is highly 
likely that in this decade the service 
sector will increasingly depend on the 
use of computer-based information 
systems. 

• The information sector itself has grown 
to account for over half of the U.S. work 
force. An examination of the trends in 
the work force reveals the extent to 
which the economy has shifted. The re- 
sults shown graphically in figure 6 il- 
lustrate the transitions from an econ- 
omy dominated by agriculture, to one 
dominated by manufacturing, to a serv- 
ice and informaticn economy. 

The information sector includes those 
who generate and sell information as 
well as those who produce information 
technology. Included are typewriter 
ard word processor manufacturers, 
newspaper publishers, and producers of 
films and broadway and television 
shows, all of whom are rapidly in- 
corporating computer-based informa- 
tion systems into their operations. The 
inforr ation sector also covers informa- 
tion services and products used by any 
organization for its own internal pur- 
poses. Examples are internal account- 
ing and production management, and 
inventory control systems, many of 
which are already computerized. 
• Greater international economic com- 
petition coupled with the decreasing 
availability of basic resources are re- 
quiring industry and Government to 
both improve and speed up their deci- 
sionmaking capabilities. Computer- 
based information systems are growing 
in importance for this purpose. Deci- 
sions about design, marketing, financ- 
ing, and resource allocation all require a 
more sophisticated approach to the col- 
lection and use of information. 
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Information Policy, Law, 
and Regulation 

As these computer-based systems become 
more important to American society, par- 
ticularly for Government administration, 
they create corresponding public policy 
issues. Current policies governing informa- 
tion systems are a composite of many spe- 
cific regulations and laws, which are based 
on three main factors: 

1 . the areas affected or the regulatory con- 
cerns (privacy, freedom of information 
etc.); 

2. the affected sector of society (banking, 
education, Government, etc.); and 

3. the lawmakers and/or rulemakers (Con- 
gress, the Federal Communications 
Commission (FCC), State legislatures, 
the Courts, etc.) 



In the course of this study, OTA identified 
14 major areas of law and regulation* that 
affect information systems or are affected by 
them. There are undoubtedly many others. 

The analysis made by OTA has led to 
these findings: 

• There are numerous laws and regula- 
tions, some overlapping and some po- 
tentially or actually conflicting, that 
directly and indirectly affect the op- 
erators and users of information sys- 
tems, the consumers of information 



Ihfsf arpas art* prtvdd. frrodom of information, first 
amendment, 1 Uh amendment, due process, communication 
rpgulBlinn (Computer !! division of the KCC), computer 
(Time, pmpru-tarv rights (patent trademark, ropvnKht) 
* Mdoni-f.. jiabihtv. antitrust, taxation (lovi-rnmpnt provision 
*»l mtormation.iindtiovprnmpnt prnrir i«mrnt of information 
sv stems 
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services, and the subjects of personal 
information data banks. 

• There appears to be neither a strong 
trend nor sentiment at present among 

X policymakers in favor of a uniform Fed- 
^Fdl^ information policy that would en- 
compass all the problems that could 
arise from the many possible uses of 
data systems.* 

• There is a lack of focus on information 
policy as such, and consequently the 
emerging issues are not being directly 
addressed.** 

• Continuation of the present situation 
could inhibit many socially desirable ap- 
plications of information systems or 
could create even more intractable pol- 
icy problems in the future. 

The term "information policy'* as used 
here does not suggest that there is or should 
be a single uniform policy governing all the 
uses of information systems in both the pub- 
lic and private sectors. In fact, no such pol- 
icy exists, nor does one appear to be likely. 

"Information policy'* does suggest the 
need for consideration of the currently con- 
fusing array of laws and regulations— and 
their strengths, overlaps, contradictions, 
and deficiencies—within some overall policy 
issue structure or framework. The structure 

♦Some recently proposed legislation would establish a com- 
prehensive approach to certain specific problem areas, eg, 
pr'vacv and freedom of information See H K 246."), 96th 
Cong , -Omnibus Right to Pnvacv Act of 1979 " Also the Na- 
tional Telecommunications and Information Administration 
INTIA) of the Department of Commerce has made an effort 
to formulate— or at least to develop a framework for 
national information policies See Arthur A Pushkin and 
Jane H Yurow. The Foundations of I'nttvit States Informa- 
tion Pnlu v. VNA. Washington, I) C , .June 1980, and .lane II 
Yurow, et al , Issut's tn Information f'olnw Helen A Shf*w 
led ), NTIA. February 1981 See also. Donald A Dunn. In 
formation Resources and the New Information Technologies 
Implications for Public Policy, National Science Foundation 
Report to the President and Members of Congress, I hv f {( v- 
Yeur Outlook on S { tvnre and IWhnoh^y vol 1 1. Mav 1980. 
pp 19.1-507 

••The 'Paperwork Reduction \ct of 1980" (Public Law 
96 511) enacted bv the 96th Congress does set out a more 
comprehensive policy and management approach for Fi-deral 
Government information systems The Act establishes 
within the Office of Management and Budget IOMM) an Of 
fice of Information and Regulatory Affairs and assigns to 
that Office a broad range of authorities and requited actions 



developed by OTA for use in this and related 
studies is shown in table 1 . 

System Issues 

The policy issues related to ir.formation 
systems per se focus on their design, im- 
plementation, and operation. They generally 
are concerned with whether the system per- 
forms the tasks expected of it with reliabili- 
ty, with appropriate security, and in an effi- 
cient and timely manner. These objectives 
mainly are of interest to the organization 
operating the system, and place major con- 
straints on the system designer. 

Technical, operational, and reliability fac- 
tors all can have broader societal sig- 
nificance even though they originate in the 
operational goals of the system itself. In re- 
cent years, for example, public attention has 
been focused on areas such as: 

• the safety and reliability of the air traf- 
fic control system; 

Table 1.— Structure of Information Policy Issues 



Leve! of issues 
System level 



Information level 



Secondary policy 
impacts 



Long term societal 
<Mfe< ts 



SOU net Of),, 



Character of issues 

Relate to the 
design implementa 
tion and operation 
of particular infor- 
mation systems 



Relate to the hand 
ling of data collec 
•ion storaqe use 
and dissemination 



Exist independent of 
the particular mfor 
matiOn systems, but 
are changed in mag 
mtude or character 
by use of 
technology 

Lonq range societal 
impacts that are not 
currently reflected 
in specific policy 
problems, but which 
may ultimately af 
fpet the nature of 
US society 

n ,ltifjy Av»p-**rnf nt v*>rh 



Example issues 

Government procure- 
ment policy 

Efficiency and 
economy of 
operation 

Security of informa 
tion systems 

Privacy record 
keeping) Freedom of 
information regula- 
tions Copyright 
and patents as re 
lated to computer 
programs 

Privacy (surveillance) 
First Amendment 

rights 
Fourth Amendmoni 

rights 
Social vulnerability 
Federal Stdte 
relations 

Privacy (soual 

attitudes) 
Psychological self 

image of humans 
Educational needs 
Social political 

effects 
Cultural impacts 
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• the reliability, security, and control- 
lability of military command and con- 
trol systems, existing and proposed. 

• the security of large-scale electronic 
funds transfer systems; and 

• the reliability, accuracy, and respon- 
siveness of the social security informa- 
tion systems. 

There is a strong societal interest in the 
proper and reliable technical operation of 
each of the systems cited above, and poten- 
tially high costs to society if they fail. 

Information Issues 

The three differing fundamental values of 
information shown in figure 7 motivate 
many of the laws and regulations affecting 
information. Individual regulations or laws 
usually address only one aspect of informa- 
tion. Policy issues, then, arise from the 
inherent tensions between the particular 
values reflected in different laws. Congress 
is called on to establish balances. These ten- 
sions are illustrated below: 

• Public y. private value. Freedom of in- 
formation laws (reflecting public value) 
can conflict with individual or pro- 
prietary concerns (reflecting rights to 
privacy). For. example, in serving the 
public interest, Government collects an 
extraordinary amount of information 
about citizens, businesses, and other 
organizations. Some of this information 
theoretically has been available to the 
public by law for a long time but has 
been protected, in fact, by the amount 
of effort required to retrieve it from 
manual recordkeeping systems. Auto- 
mated systems reduce the cod and time 
barriers to wider access to these public 
records, and thereby may accentuate 
the issue of the extent to which this in- 
formation can and should be publicly 
available. 

• Commercial v. public value. As informa- 
tion becomes a more valuable com- 
mercial com nodity, increasing tensions 
are arising between those who wish to 
sell it through new information sys- 



Figure 7.— Value Triad of Information: Conflict and 
Competition Among Private, Commercial, 
and Public Value 



Private 
value 




Commencai Public 
value Competition vajue 

Conflict 



Commercial value of information Information has been a commod 
ity of commerce for centuries Books and newspapers and m this 
century the broadcasting industry, all sell information As society 
becomes more dependent on information its valu pancreases- The _ 
very htgh growth rate of the computer based information industry il 
lustrates this trend 

Private value of information In an information society, economic 
competition is often base'J on access to special information, such 
as a formula for a soft drink an econometric projection marketing 
plans, or geological data Commercially important information is 
considered by organizations to be proprietary Similarly, individuals 
often consider information about themselves to be private, either 
because damage can be done by its disci , sure or simply because of 
desiring to be left alone 

Pubi/c value of information American society has always viewed in 
formation as having a public value, and has asserted the public in- 
terest in a free flow of information Examples include the public 
suoport of libraries, schools, and museums, a tradition of academic 
freedom and a system of open scholarly publication the first 
amendment guarantees and freedom of information laws 

SOURCE- Ofhi ♦» of Trrhnoioqv Assps.mpnt sh"H 4 



terns, and those like the public 
librarians whose traditional role is to 
treat information as a public good avail- 
able to all. These tensions may also 
stem from the competition between 
Government-collected data, made avail* 
able through freedom of information 
laws, and commercial data services. 
• Commercial v. private value. Commer- 
cially marketable information may in- 
vade privacy or proprietary rights, as in 
the case of computerized mailing lists 
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that may be compiled from third-party 
information sources without the knowl- 
edge or consent of the individuals in- 
volved. 

Secondary Policy Impacts 

Computer-based information systems, by 
increasing the quantity of information col- 
lected, the efficiency of its collection and 
dissemination, its utility, and its ease of 
storage can cause qualitative changes in the 
behavior of Government, individuals, and 
organizations as well as in the nature of 
traditional conflicts. Thus, the use of auto- 
mated information systems can have sec- 
ondary effects on policy problems that have 
existed for years and in many ways are inde- 
pendent of the technology. Because much 
more information can be obtained, handled, 
processed, and distributed so much faster! 
old problems are not merely exacerbated, 
but new ones are created. 

For example, the increased scale and 
presumed efficiency of computerized crim- 
inal justice recordkeeping intensifies the ten- 
sion society has always experienced between 
the needs of law enforcement and the in- 
dividual rights of citizens. Similarly, the 
tendency of the technology to encourage cen- 
tralized record systems creates problems of 
Federal-State relationships, a particularly 
touchy issue in law enforcement. Some ex- 
perts believe this centralization trend could 
reverse through the use of smaller com- 
puters with distributed data bases. 



Long-Term Societal Effects 

Snrial scientists engaged in futures stud- 
ies have suggested that the information rev- 
olution, spurred both by advances in com- 
puters and communication and by the 
changing role of information in U.S. society, 
will have profound long-term effects as 
dramatic as those caused by the invention of 
the printing press. 

Just as the printing press, by stimulating 
literacy and speeding the flow of ideas, sup- 
ported the Renaissance and the transition 
from medieval society to the age of en- 
lightenment, so the new '^formation sys- 
tems could profoundly transform the social 
and political environment of U.S. and world 
society. Indeed television and sophisticated 
computer-based polling technology have 
already had observable effects on the po- 
litical processes in the United States. Third 
World leaders calling on UNESCO for a 
new world information order" express the 
belief that information technology will have 
a central influence on the social and 
economic development of their countries as 
well as on international relationships. 

This overview study has not attempted to 
address in detail these broader questions. 
However, given the potential for significant 
social change, research funded publicly, 
privately, or in some jointly developed proj- 
ects could provide valuable insights into the 
long-term societal effects of computer-based 
information systems and related public pol- 
icy choices. 



Public Policy Issues 



The overview study examined the national 
information system issues judged by OTA 
to be among the most important and likely 
to warrant congressional attention over the 
next few years. These issue areas include: 
innovation, productivity, and employment; 
privacy; security; Government management 
of data processing; society's dependence on 
information systems: constitutional rights; 
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and regulatory and other issues. See chap- 
ters 6 through 12 for further discussion. 

Innovation, Productivity, and 
Employment 

Innovation, the continual generation of 
new technological ideas and products and 
services based on those ideas, is a prime req- 
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uisite for a healthy industry in a high tech- 
nology field like computers and information 
systems. Innovation in information tech- 
nology improves the productiv'ty of the in- 
formation industry itself and also offers the 
tools for improving the productivity of many 
other sectors of the economy. 

Based on anticipated advances in artificial 
intelligence, robotics, computer control, and 
input-output technology over th$ next few 
years, computer-based factory automation 
will make a substantial contribution to im- 
proving manufacturing productivity. Word 
processing and other forms of office automa- 
tion are already improving clerical produc- 
tivity and may have similar potential for 
managerial productivity. Intelligent cash 
registers and automated checkout are direct- 
ly improving the productivity of retail clerks 
and indirectly the productivity of retail man- 
agement (e.g., accounting, inventory ^ontrol, 
procurement). The full impact is yet to be 
felt of these and other applications that are 
only now starting to be installed in the 
manufacturing and service sectors of the 
economy. However, they are likely to help re- 
store an upward trend in the Nation s pro- 
ductivity. 




Photo credit IBM Corp 



The IBM scanner uses holography, a technioue for creating 
three-dimensional images, to read data on packages 



From a larger societal perspective, the in* 
creased productivity brought about by ad- 
vances in computer technology may be re- 
flected not only by greater output per em- 
ployee, but perhaps also in terms of better 
product quality, improved work environ- 
ment and job satisfaction, and longer term 
social benefits such as improved job safety 
and greater opportunities for on-the-job 
learning and career advancement. 

Congress will be confronted by a number 
of issues concerned with innovation in com- 
puter technology and its effects on produc- 
tivity and employment: 

• R&D support Innovation in computer 
and information technology depends on 
continued, aggressive R&D. Many U.S. 
corporations in the information in- 
dustry, realizing that their success de- 
pends on continued innovation, have es- 
tablished their own research centers. 
Several Federal agencies* ^support com- 
puter R&D, although the major part of 
development support comes from the 
Department of Defense and related 
agencies. An important issue is whether 
research in the applications of computer 
technology to problems in the private 
(civilian) sector— in such areas as edu- 
cation,** health, transportation, envi- 
ronmental quality, and job safety— is 
receiving adequate Federal support, 
given the critical nature of computer 
technology to the Nations well-being. 
Vitality of academic computer science. 
Pasic research in computer science is 
largely carried out in universities. Be- 
cause of the close connection between 
applied technology and basic research, 
the vitality of the computer industry is 
in part dependent on the vitality of 
academic computer science. However, 
university departments of computer sci- 
ences are experiencing problems in ob- 

* Including the National Science foundation. National 
Aeronautics and Space Administration, and Department of 
Knergy 

**Inf(. mtion Technology and Education is the subject of 
another OTA assessment in progress 
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taining the faculty, facilities, and funds 
needed to do the research and to train 
new experts. This situation is par- 
ticularly critical in systems design and 
software engineering. 

• Impacts on employment It is still un- 
certain whether the productivity in- 
creases brought about by computer 
technology will increase or decrease the 
overall employment level. Structural 
shifts in the economy are likely to occur 
since any innovation which creates new 
products and new industries will elim- 
inate some jobs only to create others. 
Even if new jobs are created or old ones 
redefined, not all workers will find it 
easy or desirable to shift. Some em- 
ployees may be unwilling or unable to 
adapt themselves to the new technology 
or may be untrainable in the ne'v pro- 
cedures. 

• Support for computer impact research. 
The area of employment impacts is a 
good example of the need for computer 
impact research, a new field developed 
o*'?r the last decade by computer and 
social scientists. To date, however, 
university groups and others have ex- 
perienced difficulty in securing financial 
support, in part because this subject 
does not fit comfortably into traditional 
scientific research programs. Computer 
impact research is not pure computer 
science; neither is it classifiaole as pure- 
ly social or political science. The results 
of such research could supply valuable 
input to the kinds of public policy issues 
identified in this overview study. 

• International competitiveness. Comput- 
er and communication technologies are 
moving ahead so rapidly that products 
can become obsolete within a few years. 
Although the United States holds a 
substantial positive balance of trade 
(and employment) in certain areas of in- 
formation technology, the maintenance 
of this balance depends in part on con- 
tinued R&D and innovation and on sup- 



portive public policies.* Because of 
aggressive import competition from 
Europe, Japan, and Canada, even do- 
mestic markets are vulnerable to any 
faltering in the technological lead. 

Privacy 

Privacy-related issues dealing with the 
collection, dissemination, and use of per- 
sonal information are likely to remain on the 
congressional agenda for a number of 
reasons: 

• An omnibus v. a selective privacy pol- 
icy. The Federal Government has 
deliberately chosen up to now to react 
to privacy issues associated with 
recordkeeping on a case-by-case basis 
rather than through omnibus legisla- 
tion, which would cover all data sys- 
tems both public and private in which 
personal information is maintained. 

With the selective approach, Congress 
will be considering a long seri6s of pri- 
vacy bills. To catch up with current 
computerized recordkeeping practices 
will require a substantial legislative ef- 
fort. An immediate concern is to de- 
velop privacy rules for computer ap- 
plications in banking, medicine, social 
and medical research, credit, insurance, 
and criminal justice. Privacy is also like- 
ly to be a major issue in the develop- 
ment of electronic mail. 

Congress may need to consider alter- 
native approaches to privacy policy. 

• New technologies, new problems. New 
applications for computer and commu- 
nication technology, such as an auto- 
mated securities exchange, in-home in- 
formation services, electronic pub- 
lisi ,ng, and the automated office, may 
create new environments for privacy 



* Relevant policy instruments include taxation, antitrust, 
and standards, among others US industnal competitive 
ness in the international electronics and computer markets 
is the subject of another OTA assessment in progress 
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policy issues to arise. As Government 
agencies such as the Department of 
Justice, IRS, or the Social Security 
Administration begin to use the latest 
generation of information technology 
for their recordkeeping activities, pri- 
vacy problems that were not specifi- 
cally addressed in previous legislation 
may have to be dealt with by Congress. 
• Secondary use of personal information. 
A fundamental assumption underlying 
much of the privacy debate in the 
1970's was that collecting personal in- 
formation is in the nature of a trans- 
action—the individual yields personal 
information in exchange for some bene- 
fit. Thus, much of the fair practice doc- 
trine centers on the requirement that 
the recordkeeper abide by obligations 
implicit in that transaction. However, 
individuals will increasingly be encoun- 
tering computerized systems that col- 
lect and store information about them 
without their knowledge or consent. 
Very little law exists pertaining to the 
ownership or disposition of such in- 
formation, even when its use may be 
contrary to the individual's perception 
of his or her interests. 
Microprocessors and surveillance. The 
potential now exists for the develop- 
ment and marketing of a wide variety of 
microprocessor and computer/commu- 
nication devices either specifically de- 
signed or capable of being used for the 
surveillance of individuals without their 
consent. Microprocessor based locks 
can provide detailed records of the 
whereabouts of anyone in a building. 
Devices called "pen registers" provide a 
similar capability for monitoring tele- 
phone traffic. Abuse of this technology 
for illicit purposes may become a 
serious problem. Even seemingly legit- 
imate applications (e.g., employer 
monitoring of employee phone calls to 
deter nonwork ?lated conversations) 



may, if abused, raise in new forms the 
classic issues of civil rights versus both 
law enforcement and the rights of em- 
ployers to monitor their employees. 

Security 

The technology for securing computer 
systems from theft, sabotage, natural haz- 
ards, and the like is improving steadily, and 
users are becoming more aware of the need 
to protect information. However, the in- 
creasingly complicated computer-based 
information systems being designed and 
built make secure operation more and more 
difficult. 

Among the several difficult issues involv- 
ing computer security that are likely to con- 
front Congress, the following appear to be 
the most significant: 

• Protection of Federal systems. Federal 
information systems control the dis- 
bursement of an enormous amount of 
money. The Social Security system it- 
self disburses over $2 billion per week. 
Other Federal systems contain infor- 
mation that could be used directly or in- 
directly to make profitable financial de- 
cisions, e.g., information on Federal 
monetary policy, on commodity mar- 
kets, and on energy resource estimates. 
Still others contain sensitive in- 
formation relating to personal privacy 
or national security. All would be highly 
attractive to theft, manipulation, or 
eavesdropping. 

These are not the only threats to Fed- 
eral computer systems that Congress 
will need to consider. A more subtle 
threat is a system s potential diversion 
by the bureaucracy from its intended 
use; for example, the use of computer- 
ized criminal histories for employment 
or licensing purposes. As the Gov* 
ernment continues to automate, prob- 
lems of bureaucratic accountability and 
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the responsibility for oversight will con- 
front Congress with the need to better 
understand and more closely monitor 
the use of large Federal information 
systems. 

• Protection of vital domestic information 
systems. There is a Federal respon- 
sibility for certain information systems 
that, although privately operated, are 
fundamental to social well-being. The 
security and reliability of automated 
systems for nationwide bank check 
clearing, electronic message systems, 
and computer-based commodity trad- 
ing, for example, would all be under the 
purview of Congress. The vulnerability 
of such systems is of governmental con- 
cern because of the harm that a major 
system failure could cause to the Na- 
tion's economy and to its citizens. 

• Development of data security and cryp- 
tographic capability. The Federal Gov- 
ernment, due to its traditional concern 
for the protection of military and dip- 
lomatic communications, has a high de- 
gree of expertise in the field of data 
security. For example, the National 
Bureau of Standards is developing com* 
puter security guidelines and standards 
for use by Federal agencies. The first 
standard to emerge from this effort is 
the Data Encryption* Standard (DES) 
for protecting data communication. 

While the DES is public, much of the 
Federal expertise is either classified or 
in the hands of highly sensitive or- 
ganizations such as the National Securi- 
ty Agency. The appropriate role of the 
Federal Government has not been de- 
fined in transferring this knowledge, 
supporting computer security research 
in both the public and prr ate sectors, 
setting standards for non-Federal sys- 
tems, and certifying security tech- 
nology. 

The lack of such policy definition is 
visible in the current debate over 
Government control of cryptographic 

♦Encryption ih the coding of a message so that it is only 
understandable to a receiver who knows the secret decoding 
procedure and/or key 
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technology. In this debate, the needs of 
the private sector for increased com- 
munication security, and hence for the 
existence of a civilian commercial cryp- 
tographic capability, are set against the 
perceptions of the defense community 
that such development threatens na- 
tional security concerns by putting sen- 
sitive information in the public domain. 
A related issue is the desire in the 
academic community for the freedom to 
conduct research on the mathematics 
underlying cryptography. 

Government Management of 
Data Processing 

In the early days of computing, the Fed- 
eral Government as a user was a principal 
stimulus to the development of the field. 
Although a few instances of Federal exper- 
tise at the leading edge of computer applica- 
tions remain, the Federal Government is 
rapidly falling behind the private sector in 
its use and management of up-to-date com- 
puter and information technology. Such a 
lag would penalize Government operations 
in two ways; 

1. potentially lost opportunities to use the 
newest technology to improve the efficiency 
and effectiveness of Government programs; 
and 

2. increased cost and decreased reliability 
resulting frcm operating systems that are 
becoming obsolete, from archaic manage- 
ment procedures, and from burdensome pro- 
curement restrictions. 

Cheaper computing hardware, the emer- 
gence of data communication-based sys- 
tems, and new software techniques are 
changing the way computers are used in in- 
dustry. The next 10 years will see significant 
movement in the private sector toward 
automating the flow of information in of- 
fices, toward experimenting with new man- 
agement structures based on high-volume 
data communication, and toward auto- 
mating decision support systems for use by 
higher management. To the extent that 
these applications fulfill their promise of 
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improvement in both the quality and produc- 
tivity of management, the Federal Govern- 
ment would be remiss in not making use of 
them where appropriate. 

The most recent legislative action to ad- 
dress this problem is Public Law 96-511, 
known as the Paperwork Reduction Act of 
1980, which establishes central oversight in 
the Office of Management and Budget of the 
information policies id practices of the ex- 
ecutive branch. * aps most important, 
this Act emphasizes the basic jieed for re- 
structuring the way information resources 
and supporting technologies are managed in 
the Government. This represents a new and 
as yet untested approach by giving manage- 
ment of information resources similar im- 
portance to that traditionally assigned to 
managing financial and personnel resources. 

Many other issues and questions also need 
attention from this broader perspective. For 
example: 

• Automated bureaucracy. There is a 
need to better understand the effects of 
large-scale information systems on the 
internal organization and management 
of Government agencies and on Federal 
decisionmaking. What effects do these 
systems have on the location of respon- 
sibility, the quality of the decisions, the 
nature of due process for clients af- 
fected by those decisions, and the ac- 
countability of the bureaucracy to 
higher-level policymakers in the ex- 
ecutive branch and to Congress itself? 

• Social values and goals. The process by 
which appropriate social values and 
goals are reflected in Federal informa- 
tion systems design needs clarification. 
Major new systems will need to be 
evaluated for their effects on privacy, 
security, constitutional rights, and 
many other issues that are not normally 
the concern of the designer or operator 
of an information system. 

Three fundamental approaches are 
available to deal with social value ques- 
tions: 

1. Congress could assess the potential 
social impacts of each new system de- 



sign that is proposed on a case-by- 
case basis. 

2. Congress could codify a social impact 
policy concerning all Federal informa- 
tion processing systems. An appro- 
priate agency could be designated as 
responsible for seeing that all new 
system designs are evaluated in rela- 
tion to that policy. 

3. Congress could continue to examine 
agency proposals system by system, 
but would base its evaluation on a 
social impact framework encompass- 
ing a set of principles for the design 
and operation of Federal information 
systems. 

Whatever the approach, it will be nec- 
essary for Congress to balance the need to 
speed up design and procurement of Federal 
systems, against the requirements that tax 
money be spent as effectively and as 
equitably as possible and the necessity to 
consider carefully the societal impacts of 
these systems. 

Society's Dependence on 
Information Systems 

The nature of risk is being changed by 
much of the new high technology on which 
modern society depends— jumbo commercial 
airlines, nuclear powerplants, oil super- 
tankers, or large computer-based informa- 
tion systems. In general, because new tech- 
nologies can be designed to operate more 
reliably than the ones replaced, the risk that 
any particular mechanism may fail has been 
reduced. However, should an accidental or 
deliberate disruption occur, its cost can be 
much larger, even catastrophic. Further- 
more, when society becomes highly depend- 
ent on the reliable functioning of a single in- 
tegrated technological system or small col- 
lection of such systems, the possibility of a 
"domino-like" collapse of several of the in- 
dividual connected units could also be 
disastrous. 

This evolution to dependency can be seen 
already in the reliance of safe public air 
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transport on the continuous operation of the 
computerized air traffic control system.* In 
the commp n] sector, large stores and 
banks rely on ie smooth uninterrupted op- 
eration of their computer systems. 

Thus, as society moves toward electronic 
funds transfer systems, widely available 
electronic mail service, and other large ex- 
tensively used information systems, the 
following factors warrant consideration: 

• The ways in which public policy can 
help to allocate and balance the risks 
society may encounter from national in- 
formation systems against the benefits 
it may receive, under conditions where 
failure rates appear to be low but poten- 
tial losses may be high should a failure 
occur. 

• The ability of society to retain the op- 
tion to end its dependence on a par- 
ticular information system if it has 
unanticipated undesirable effects; in 
other words, to avoid the possibility of 
becoming "locked in" to the use of cer- 
tain information systems once they are 
installed. 

• The capability of providing alternatives 
to persons or institutions choosing not 
to accept perceived risks in a new in- 
formation system. 

• The ways in which technology can b? 
utilized to reduce the risks, for example 
by introducing additional system re- 
dundancy (alternative paths between 
points in the system, distributed data 
bases, backup computers). The risks in- 
herent in U.S. dependence on a nation- 
w: ie. interconnected telephone system 
(which itself is rapidly being com- 
puterized) are minimized by the large 
number of circuit switching centers and 
parallel trunklines. 

Large complex information systems con- 
tain millions of logical connections and are 
controlled by programs that themselves can 
be composed of millions of instructions. Con- 
sequently, it is difficult to calculate their 

* Yhf airport <ind ,nr tr.it in « ontml ^\-icni is the Mihu < t of 
tinnthrr ( > I* \ .h^'^im n f 
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reliability and to predict the failure rate of 
any particular part of the system, as well as 
the effect of a failure on the operation of the 
entire system. New research in risk analysis 
is needed to address the problem of esti- 
mating risks under these conditions. 

Constitutional Rights 

Little legal precedent exists, in many 
cases, for applying constitutional law to the 
issues raised by computer-based information 
systems. This overview study identified sev- 
eral areas of constitutional rights that may 
be affected by information systems, as il- 
lustrated below: 

The first amendment guarantees freedom 
of religion, speech, the press, peaceable 
assembly, and the right to petition for 
redress of grievances. 

• A principal first amendment issue 
facing the Government may be how to 
encourage the maximum freedom of ex- 
pression—fostering the "marketplace of 
ideas"—in new electronic media that 
have been tightly regulated in more 
traditional forms. For example, the 
scarcity of frequency spectrum and 
channel capacity that provided a basis 
for regulation of broadcast television 
may not apply to new versions of TV 
such as cable, direct-to-home satellite, 
and videotext. 

• Another first amendment issue may be 
generated by extensive data collection 
and possibly surveillance by Govern- 
ment and private organizations that 
could, in fact, s'.ppress or "chill" 
freedoms of spee^n, assembly, and even 
religion by the implicit threats con- 
tained in such collection or surveillance. 
These threats might be directed as 
much at the "listener" as the 
"speaker." Clearly, automated informa- 
tion delivery systems possess a much 
greater capability for recording, stor- 
ing, and analyzing in detail the flow of 
information from all sources into homes 
and offices, than do manual systems 
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such as bookstores, newspapers, and 
the like. 

The fourth amendment protects the per- 
sons, houses, papers, and effects of in- 
dividuals against unreasonable searches and 
seizures by the Federal Government. 

• Fourth amendment issues may develop 
from: 

-the use of personal and statistical 
data contained in automated informa- 
tion systems as a justification for 
search and seizure; 

—the search and seizure of information 
per se as personal property, particular- 
ly in electronic form; and 

-the use of automated information sys- 
tems as a tool for search and seizure 
operations. 

An electronic mail cover illustrates the lat- 
ter type of fourth amendment issue. A non- 
electronic mail cover requires approval by 
the Postal Inspection Service but not a 
search warrant because only the outside of 
an envelope is examined. In an electronic 
mail system, however, no distinction may ex- 
ist between the "outside" (or address) and 
the 4 'inside* * (or contents i of a message. 
Therefore, it may be difficult to distinguish a 
mail cover from a wiretap, which would re- 
quire a warrant issued by a court upon prob- 
able cause, unless some form of coding was 
used to "seal** an electronic message as an 
envelope seals a physical one. 

The fifth amendment guarantees that a 
person may not be compelled to be a witness 
against himself or be deprived of life, liberty, 
or property without due process of law. 

• A fifth amendment issue could arise 
from the use cf personal or corporate 
computer data that have been collected 
by the Government for one purpose as 
evidentiary material in unrelated crim- 
inal or regulatory cases. 

• Another fifth amendment issue could 
develop from the delivery of Govern- 
ment services by computer-based infor- 
mation systems. For example, very 
large systems that "mass produce" de- 



cisions in such areas as health benefits, 
student loans, or tax returns may have 
subtle biases "built in" to the program 
or code of the computer. These systems 
may react quickly to what the computer 
recognizes as "normal" applications, 
but reject "unusual" claims. If, as a 
consequence, citizens are subjected to 
an unacceptable amount of hassle, delay 
and/or error, the program or code used 
by the computer to define "normal" or 
the entire information system may be- 
come subject to due process challenge. 

The sixth amendment guarantees, among 
other things, the right of a speedy and public 
trial by an impartial jury. 

• A sixth amendment issue may be raised 
by the growing use of computerized 
dossiers of potential jurors along with 
computer models for predicting juror 
behavior. At this time, computer-based 
jury selection is very expensive and its 
value is controversial. However, future 
computer technology and social scien- 
tific techniques may make this applica- 
tion cheap and improve its effective- 
ness. If so, the entire concept of an "im- 
partial" jury may be challenged. 

The 14th amendment guarantees that a 
State cannot deprive any person of life, liber- 
ty, or property without due process of law 
nor deny any person within its jurisdiction 
the equal protection of the laws. 

• Fifth and 14th amendment issues may 
develop from a similar application of 
computer-based social science and sta- 
tistical models to predicting criminal 
behavior and to aid in such tasks as ap- 
proving credit, determining insurabili- 
ty, or hiring and promoting employees. 
Essentially, individuals may be denied 
rights, privileges, and benefits based, 
not on past performance, but on a 
prediction of future tendencies. For ex- 
ample, society cannot imprison a person 
that a computer model predicts may 
someday rob a bank. But should that 
knowledge be "probable cause" to 
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monitor such a person closely or deny 
employment? 

Regulatory Boundaries 

As computer-based information systems 
evolve, they challenge traditional concepts 
of boundaries— physical or social—that ?re 
reflected in the law and regulatory policy. 
The integration of computer and commu- 
nication technologies creates systems that 
cross boundaries between nations, States, 
and organizations. The issue of transborder 
data flow discussed in chapter 12 exemplifies 
the kinds of international problems created. 
Others include the following: 

• Interstate conflict of laws: When States 
have conflicting laws involving informa- 
tion or information processing, for ex- 
ample, property laws that cover com- 
puter data bases, an integrated data 
system that exists in a number of dif- 
ferent States can raise difficult ques- 
tions of legal jurisdiction. 

• Federalism: Linking Federal data sys- 
tems with State and local systems com- 
plicates problems even further. Issues 
of federalism could arise with systems 
containing data on criminal history, 
taxation, welfare, education, medical 
care, and drug abuse, among others. 

• Antitrust: Policy issues may arise with 
respect to whether large integrated 
data systems using shared facilities 
create monopolistic barriers to new en- 
trants or are mechanisms for control of 
the market, or whether they encourage 
competition by reducing the cost of ac- 
cess for smaller firms. 

Information technology is changing form 
so fast that it is tending to outstrip the 
working definitions of devices and services 
that serve as the basis for law and regula- 
tion. These definitional problems relate both 
to the technology itself, and to the products 
and services that depend on it. 

• Computers or communication: The best 
known example is the continuing at- 
tempt by the Federal Communications 



Commission to establish what services 
and what technologies are already 
"communications/' thus regulated, and 
what are "computer" services and 
technologies, thus not regulatable. 
Their second inquiry on these ques- 
tions, which began in 1976, only re- 
cently resulted in an opinion that is now 
under court challenge. Even if the 
definition is accepted, there is no reason 
to believe that the problem has been 
permanently resolved. 

• Branch banking: Many States have 
laws that either prohibit or tightly regu- 
late branch banks. An issue that has 
been widely debated is whether the 
automated extensions of banking (e.g., 
automatic teller machines or pay-by- 
phone services) constitute "branches" 
in the usual meaning of the law. 

• The status of electronic mail: Electronic 
data transmission has opened a major 
policy question about the definition of 
mail. As with the computer/communica- 
tion issue above, this definition is sig- 
nificant because it places a class of serv- 
ices under one or another set of reg- 
ulations. Unlike many other countries 
that have combined postal and telecom- 
munication services under one national 
agency, the United States has pursued 
completely different approaches to reg- 
ulating each service category. Elec- 
tronic mail, in its various forms, pro- 
vides a new service with features of 
both manual delivery and telecommu- 
nication, and may pose new and dif- 
ficult regulatory questions. 

Other Issues 

Four other issue areas were identified as 
important although not analyzed in great 
detail: 

1. Computer crime: Crime directed against 
computer-based information systems or 
in which these systems are used as tools 
for criminal activity. 
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2. Transborder data flow: Problems that 
arise from differing national attitudes 
and laws regarding the increasing flow 
of data and interconnection of informa- 
tion systems across national bound- 
aries. 

3. Information gap: The possibility that 
some individuals or groups would be 
denied access to information services 



vital to their survival in an information 
society because of technological illit- 
eracy, lack of economic resources, or 
other reasons. 
4. Computer software protection: The con- 
cern that continuing uncertainty about 
copyright and patent protection for 
computer software is significantly im- 
pairing software R&D and innovation. 



ERIC 



3i 



Chapter 2 

Background and 
Purpose of the Study 



Contents 



introduction . a) 

Congressional Requests . . ;]() 

OTA Response. . .31 

NIS Study tioals 32 

Study Methodology 

LIST OF TABLKS 

/ a hU> \i> Pave 

2. Summary of Congressional Requests for OTA Assessments 

Concerning National Information Systems 'M 

'.\ Initial Working List of Impact and Issue Areas :\4 



ERLC 



Chapter 2 

Background and 
Purpose of the Study 



Introduction 



As computer-based national information 
systems become more important to Amer- 
ican society, particularly for Government ad- 
ministration, they create corresponding pub- 
lic policy problems. Thus, over the past 10 to 
15 years Congress has been confronted with 
a series of increasingly complex issues grow- 
ing out of the way computer-based systems 
have been designed and used. These have 
covered a wide range of concerns such as: 

• the design, procurement, and operation 
of Government data systems; 

• the potential for Government agencies 
to abuse the large record systems they 
operate that contain personal data; 

• the effects of computer technology on 
the structure and operations of the 
banking industry; 

• the role of the Postal Service in pro- 
viding electronic message service; 

• problems concerned with the protection 
of privacy and constitutional rights pre- 
sented by the use of large automated 
data systems; and 

• the impact of information technologies 
on copyright laws. 

Congressional and public interest in these 
and related issues has been illustrated by a 
variety of actions over the last decade. 

• New legislation— bills and acts concern- 
ing privacy, standards, and computer 
crime. 

• Special commissions— the Privacy Pro- 
tection Study Commission, the Com- 
mission on Electronic Funds Transfer, 
the Commission on Postal Service, and 
the Commission on New Technological 
Uses of Copyrighted Works. 

• Hearings on privacy, Government rec- 
ordkeeping practices, the impacts of 



particular Government systems, consti- 
tutional rights, innovation in the micro- 
electronics industry, the use of com- 
puters in education, and many other 
topics. 

• Regulatory and interagency jurisdic- 
tional issues— such as protracted com- 
puter regulation inquiries by the Fed- 
eral Communications Commission 
(FCC), and challenges to regulatory au- 
thorities involving the FCC and the 
Postal Rate Commission. 

• Studies— requests by the legislative 
branch to the Office of Technology As- 
sessment (OTA), the Congressional Re- 
search Service (CRS), and the General 
Accounting Office (GAO) for studies on 
particular issues involving information 
systems. These parallel extensive simi- 
lar activities in both the executive and 
judicial branches. 

Executive branch interest is illustrated by 
the formation of the National Telecommuni- 
cations and Information Administration 
(NTI A) in the Department of Commerce, by 
research projects on computer and telecom- 
munication impacts funded by the National 
Science Foundation, and by a variety of ex- 
ecutive orders regarding Federal data proc- 
essing practices. Interagency groups have 
been formed to address domestic and inter- 
national information policy and planning 
problems. 

This overview is one of a group of four 
studies collectively entitled "Assessment of 
Societal Impacts of National Information 
Systems." The individual studies are: 

• an overview assessment of technology 
and public policy issues relevant to 
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computer-based national information 
systems; 

• an assessment of the National Crime In- 
formation Center (NCIC) and Com- 
puterized Criminal History (CCH) 

4& Systems; 

• a preliminary assessment of the role of 
the U.S. Postal Service in electronic 
message systems; and 

• a preliminary assessment of electronic 
funds transfer systems. 



This overview report is intended to be a 
broad introductory examination of comput- 
er-based national information systems and 
related technology and public policy issues 
that Congress is likely to face over the next 
few years. It will also serve as a foundation 
for the other three OTA studies and for fu- 
ture in-depth examination of particular sys- 
tems and issues. It should also generate an 
awareness of the increasingly critical role 
that national information systems play in 
society. 



Congressional Requests 



Over the last 5 years, OTA has received a 
number of requests from congressional com- 
mittees and subcommittees to study and re- 
port on the impacts of national information 
systems on society and on public policy. 

TAS and NCIC: In February 1976, the 
House Ways and Means Committee and its 
Subcommittee on Oversight requested that 
OTA conduct an assessment of the new Tax 
Administration System (TAS) proposed by 
the Internal Revenue Service. In September 
1976, the Subcommittee on Government In- 
formation and Individual Rights of the 
House Government Operations Committee 
also requested such a study in a letter that 
raised, in addition, much broader questions 
about Government information systems. 
Both requests stressed the issues of privacy 
and the impact of TAS on the Government's 
use of tax return information. 

In September 1977, the House Judiciary 
Committee, together with its Subcommittee 
on Civil and Constitutional Rights, re- 
quested an assessment of NCIC adminis- 
tered by the Federal Bureau of Inves- 
tigation. The requests expressed particular 
concern with the CCH Program and its pos- 
sible detrimental effects on privacy and civil 
liberties. 

In response to these requests, OTA car- 
ried out preliminary assessments of both 
systems. The TAS preliminary assessment 



was published in March 1977 J and the NCIC 
preliminary assessment in December 1978. 2 

Additional Requests: Subsequently, OTA 
received a number of congressional letters 
endorsing these assessments but also raising 
broader questions concerned with informa- 
tion policy. Some were directed at specific 
categories of systems under a particular 
committee s jurisdiction; others dealt more 
generally with social impacts in areas such 
as privacy and constitutional rights. The 
concerns expressed in the requests spanned 
a number of different applications in both 
the private sector and the Federal Govern- 
ment. A number of these requests and their 
particular areas of interest are shown in 
table 2. 

In July 1980, a letter was sent to OTA by 
Cong. George E. Brown, a member of the 
Technology Assessment Board and then 
Chairman of the Subcommittee on Science, 
Research, and Technology of the House Sci- 
ence and Technology Committee. It ex- 
pressed an even broader and more compre- 



*U S Congress. Office l f Tethnologv Assessment, A Pre- 
liminary Analysts nf tfu IRS Atimititstrattnn System 
OTA TCI 4:i, March 1977 

US Congress, Office of Technology Assessment, A Pre- 
liminary Assessment <tf the Xatumat fVime Information 
Center and the Computerised ( rtmtnal llwtnry System, 
OfA-im December I97H 
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Table 2.— Summary of Congressional Requests for OTA Assessments 
Concerning National Information Systems 



Date 

February 1977 
September 1977 



September 1977 
Januarv-June 1978 

December 1978 



Committee or subcommittee 

House Committee on Post Office and Civil 
Service 

House Subcommittee on Government 
Information and Individual Rights (of the 
House Committee on Government 
Operations) 



House Subcommittee on Civil and 
Constitutional Rights (House Committee on 
the Judiciary) 

Senate Committee on the Judiciary, 
Subcommittee on Administrative Practice 
and Procedure, Subcommittee on the 
Constitution 

Senate Committee on the Judiciary, 
Subcommittee on Administrative Practice 
and Procedure, Subcommittee on Antitrust 
and Monopoly, Subcommittee on the 
Constitution, Subcommittee on Criminal 
Law and Procedure 



Areas of interest 

Requested an assessment of electronic mail, 
emphasizing the role of the U S Postal Service 
and employment impacts 

Reaffirmed a previous request for a TAS study 
and encouraged a wider look at the impact of 
Government information systems on privacy, 
freedom of information, and other related 
issues, and asked OTA to explore a possible 
Government-wide policy on data systems 

Requested a full assessment of NCIC 



Requested a full assessment of NCIC Raised 
issues of constitutional rights, privacy, other 
civil liberty concerns, and Federalism 

Requested a study of the impact of 
telecommunications and domestic information 
systems on constitutional rights, civil liberties, 
privacy, freedom of information, antitrust and 
constitutional rights Requested NCIC study 
S. ecifically mentioned electronic banking 
applications, electronic mail, and criminal 
justice systems 



SOURCE Office of Technology Absessmpnt 



hensive range of concerns about the societal 
impacts of information technology. Con- 
gressman Brown requested that, given the 
breadth and complexity of the subject, OTA 
undertake a preliminary study to create a 



"map" of the field. This map would include 
the major technologies, their areas of ap- 
plication, the impact issues, and the prin- 
cipal current efforts by various agencies to 
study these problems. 



OTA Response 



In October 1978, the national information 
systems (NIS) assessment was initiated by 
OTA, following a March 1978 approval by 
the Technology Assessment Board. It was 
designed with four components: 

• an assessment of NCIC/CCH; 

• an assessment of the role of the U.S. 
Postal Service in electronic message 
systems; 

• an assessment of electronic funds trans- 
fer systems; and 

• an overview of the crosscutting impacts 
of all information systems. 

These were at first envisaged as case - 
study components in a single large assess- 



ment of the impacts of national information 
systems. In time, however, they evolved into 
separate studies. The basis for this modifica- 
tion was the following judgment, which was 
confirmed by the OTA Advisory Panel on 
National Information Systems and the OTA 
staff. 

While some observations can be made 
about national information systems in gener- 
al full assessments of their policy impacts 
can only be made in the context of particular 
systems, particular applications, and/or par- 
ticular users, and legal/social environments. 

Consequently, each case study needed to 
be carried out as an individual assessment in 
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which the characteristic issues raised by 
that type of system would be addressed in 
its own legal, regulatory, social, and econom- 
ic environment. It was questionable, how- 
ever, whether the overview study would be 
effective as a unifying effort cutting across 
the three other studies by generalizing ther 
results. Thus, its goals had to be carefully 
examined and clarified. 

In addition, in late 1978, in response to re- 
quests from the House and Serite Commit- 
tees concerned with communication policy. 



an assessment of telecommunication sys- 
tems was begun at OTA and conducted in 
parallel with the NIS assessment. The tele- 
communication study focused on an ex- 
amination of common carrier policy and im- 
pacts. 5 Both assessments have been closely 
coordinated to avoid duplication of eftort 
particularly in the analyses of industry 
structure and technology. 



'US Congress, Office of Tc-chno!og> Assessment, h'le- 
communu atton 7 echnologv end Puhhi Pnhv\ 



NIS Study Goais 



It would not be possible for anv one study 
to capture succinctly a single set of policy 
issues which would apply to all national in- 
formation systems in American society. The 
specific systems applications are too differ- 
ent, the potentials and problems too com- 
plex, and the parties-at-interest and relevant 
institutional and legal framework too 
diverse. 

Faced with a complexity of possible 
topics, OTA established the following set of 
limited goals for this overview study: 

• To provide a general introduction to 
computer-based national information 
systems: This study should acquaint 
the nonexpert reader with the nature of 
computer-based national information 
systems, their roles in American soci- 
ety, and the characteristics of their im- 
pacts and the policy issues that result 
from their use. 

• To provide a foundation and context for 
the other related OTA assessments' 
The NCIC/CCH, electronic funds 
transfer, and electronic message system 
studies all require fundamental state-of- 
the-art surveys of the computer and 
related technologies and industries. 
This data base is provided by the over- 
view report. In addition, a framework of 
potential impacts is laid out within 



which the specific issues raised in each 
study can be explored. 
• To build a foundation for future studies: 
Over the next few years, Congress will 
continually be confronted with a num- 
ber of issues loosely characterized as be- 
ing related to "information policy/' 
Congressional agencies such as OTA, 
CRS, and GAO, as well as executive 
branch agencies such as I^TIA, are be- 
ing asked to address these issues. 

To date, most research and writing about 
the impacts of computerized information 
systems have been unrelated. Different ter- 
minology, different concepts about the na- 
ture of the impacts, and different analytic 
methodologies have been used. There is a 
need for some consistent structure, such as a 
map of the information technology field as 
discussed by Congressman Brown in his let- 
ter to OTA. A start is made toward develop- 
ing such an analytic framework in chapter 5. 

This studv's assessment of the directions 
the development of computer technology 
and its applications to national information 
systems will take provides a useful baseline 
for future work. The description of the cur- 
rent status of the information industry and 
its likely evolution will be useful in project- 
ing possible future services and the nature of 
the market and regulatory forces that may 
shape those services. 
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Study Methodology 



The limited nai * ' this study's goals, 
along with its role providing a supporting 
framework for the three other studies, dic- 
tated a modest plan using in-house staff sup- 
plemented by an advisory panel and other ad 
hoc expert review. The project was orga- 
nized around the following information- 
gathering tasks: 

• technology, 

• industry structure, 

• social trends, 

• legal and regulatory environment, and 

• policy issues analysis. 

Technology: This survey examines the 
current state of computer technology and 
projects its development over the next 10 to 
20 years. It stresses the technology likely to 
be available to computer users, rather than 
the leading-edge capabilities likely to exist 
only in laboratories and on drawing boards. 
A working paper prepared by OTA staff was 
reviewed by a special technology panel set 
up for that purpose. This was coordinated 
with a parallel effort supporting the telecom- 
munication assessment. The technr' v sur- 
vey is highlighted in chapter 3, presented in 
detail in chapter 13, and used throughout the 
report. 

Industry Structure: This survey examines 
the current state of the computer and in- 
formation industries, describes growth 
trends, and projects their development over 
the next decade. It, too, was an in-house 
staff effort, drawing on the technology Danel 
for review and input, and coordinated with 
the telecommunication assessment. The sur- 
vey of industry structure and the technology 
are highlighted in chapter 3, presented in de- 
tail in chapter 14, and likewise used through- 
out the report. 

Social Trends: A small task was under- 
taken to list those political, economic, and 
social trends believed likely either to have ar 
impact on the use of computer-based infor- 



mation systems or to be affected by their ap- 
plication. A brief working paper was drafted, 
reviewed by an ad hoc workshop of outside 
experts, revised in accordance with their 
comments, and integrated into chapter 4 and 
the policy issue chapters (6 through 12). 

Lepal and Regulatory Environment: The 

in-house staff examined the range of legal 
and regulatory requirements, existing or 
pending, that affect the use of computer- 
based information systems. Analyses were 
prepared in 13 areas of law and regulation. 
These were reviewed for accuracy and com- 
pleteness by a pro bono mail review panel of 
legal experts, and then utilized in chapter 5 
and in the policy issue chapters. 

Policy Issues Analysis: An initial list of 
issues was prepared by OTA staff (see table 
3). It was later modified by consideration of 
the following: 

• concerns mentioned in the congression- 
al lequests; 

• panel advice on priorities; 

• comparison with issues examined in the 
NCIC/CCH, electronic funds transfer, 
and electronic mail studies; 

• comparison with issues developed in the 
parallel telecommunication study; and 

• possible and likely future studies by 
OTA in related areas. 

The topics selected for further analysis do 
not represent a complete list of all the prin- 
cipal national information system issues 
that may confront Congress over the next 
decade. In OTA s judgment, however, these 
will be among the most important. The brief 
essays pr?sen^ in chapters 6 through 12 
are not intended as full analyses of these 
issues. Rather, they describe the general 
nature of the conflicts, and how future ap- 
plications of computer-based information 
systems may intensify or alter the character 
of the policy debate and the need for new 
laws and policies. 
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Table 3. — Initial Working List of Impact and Issue Areas 3 



Economic impacts and issues 

1 Costs, econonrnc growth and availability of services 

2 Technological displacement obsolescence and 
impact on the work force 

3 Resource availability and demand 

4 Competition 

5 Regulation and standards 

6 Research and development (innovation in both 
hardware and software services) 

7 Public goods 

8 International markets and services 

9 Effects on other industries (e g . travel) 

10 Employee rights and privileges and labor management 
relations 

Social impacts and issues 

1 Privacy 

2 Confidentiality 

3 Security 

4 Due process and fairness ('ndividua! access accuracy, 
timeliness currency, and purging) 

5 Freedom of information 



6 Equity, social justice, and equality of access to 
services 

7 Civl liberties (first, fourth, and fifth amendments}— 
constitutional rights 

8 Surveillance and social control 

9 Changes in the basic social structure and functioning 
of groups (e g , families), organizations (e g , schools), 
and institutions (e g , banking) 

10 Centralization and decentralization 

11 Educational changes 

12 Public participation 

13 Accountability and oversight 
Legal Impacts and Issues 

1 Copyrights, patents, trade secrets and ownership of 
information 

2 Antitrust 

PottUcal impacts and ;ssues 

? Federalism and intergovernmental relations 

2 International sovereignty 

3 National security 



d tf is ri»i iKjnt*r .1 ♦h.it ",pvf>Mf topics » j , unilrrmn'. Ihv h»h gr > U p nr.ul m, h.,^ 
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Chapter 3 

Information Systems and Computers 



The Nature of Computer-Based 
Information Systems 



Traditionally, the popular view of com- 
puters has been that they are super calcu- 
lators that automate processes which were 
previously performed by numbers of people 
sitting at mechanical adding machines. How- 
ever, computers carry out a wide variety of 
tasks associated with processing informa- 
tion. It is important to understand the entire 
range of these capabilities in order to ap- 
preciate the nature and magnitude of the 
potential social impacts of this technology 
when used in information systems. 

Computer capabilities fall into seven main 
categories: 

1. Data collection. When attached to vari- 
ous sensing devices, computers can 
detect and measure such external phys- 
ical phenomena as temperature, time, 
pressure, flow rate, consumption rate, 
or any number of other variables. Also, 
computers can keep a record of trans- 
actions. For example, a computerized 
cash register can collect and store in- 
formation about a sale that includes 
bookkeeping entries, taxes, commis- 
sions and inventory, and can even re- 
order stock. Some computer-based door 
locks require individuals to carry mag- 
netic identity cards. Such locks not only 
can control access but also can create a 

, record of whose card was granted ac- 
cess, when, and for how long. 

Technological advances are begin- 
ning to provide computers with the ca- 
pability to directly process visual and 
audio input, thus greatly increasing 
their applicability to data collection. 
Computers already have a limited abili- 
ty to recognize human speech, to read 
directly a variety of typewritten forms 
and handprinted texts, and to detect 



patterns in video images. These func- 
tions will be improving rapidly over the 
next decade and will appear in commer- 
cial equipment. 

2. Information storage. Computers can 
store large amounts of information for 
long periods of time in an electronic- 
readable form that is easily and quickly 
recoverable. Depending on the particu- 
lar application, the methods of storage 
vary widely, from signals in electronic 
circuitry, to magnetic pulses on tape, to 
holes in cards. New advances in mem* 
ory technology eventually will allow 
trillions of characters of information to 
be stored conveniently and cheaply 
wherever there is even a small com- 
puter. The cost of storing information 
electronically will soon be substantially 
lower than the cost of storing the same 
amount of information on paper. 

3. Information organization. Computers 
can be used to rearrange, information so 
that it is more suitable for particular ap- 
plications. For example, if the data in a 
telephone directory were stored in a 
computer's memory, it could be in- 
verted to allow one to look up a tele- 
phone number that corresponds to a 
particular address. More generally, 
computers can simplify and restructure 
vast amounts of raw data to assist peo- 
ple in drawing significant meanings or 
conclusions. 

4. Calculations. Computers perform arith- 
metic calculations millions of times 
faster than can human beings. They are 
used to make numerous simple calcula- 
tions, such as those required in process- 
ing the payroll for a sizable organiza- 
tion; to make sophisticated statistical 
calculations on large amounts of data, 
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such as those for social science re- 
search; or to perform highly complex 
scientific calculations, such as those 
needed for weather research or for mod- 
eling fusion energy systems. 

5. Communication. Through connections 
over a telecommunication system, com- 
puters can transmit data around the 
Nation and the world either to human 
users or to other computers, which per- 
mits the sharing of work and data 
among groups of linked computers 
(known as computer networking). Pri- 
vate firms are beginning to offer special 
communication services to support 
computer networking. In addition, com- 
puters make possible the more effective 
use and management of the communica- 
tion systems themselves. 

6. Information presentation. Computers 
can put out information in a variety of 
forms. Through graphical display, and 
more recently through voice response, 
they can make data readily understand- 
able and useful to nonexperts. It is pos- 
sible to have data and computer sche- 
matics displayed on screens in a multi- 
colored, three-dimensional format for 
design and analytical purposes. Also, 
data such as numbers and statistics can 



be organized by the computer in an 
easy-to-understand tabular presenta- 
tion. Much of the programing effort in 
developing modern management infor- 
mation systems is directed toward de- 
signing ways in which the information 
generated by the computer can be 
presented most clearly to the manager 
who needs it. 
7. Control. Computers can be used to con- 
trol a machine tool or a production line 
without human intervention. Many con- 
sumer devices— including microwave 
ovens, automated home thermostats, 
automobile engines, television sets, and 
telephones— incorporate computer con- 
trols using new micro? rocessor technol- 
ogy. Such uses are increasing rapidly 

Several of these capabilities can be com- 
bined, for example in computer-aided design 
of aircraft structures (or computer logic 
elements, for that matter) and computer- 
based modeling of the saltwater penetration 
in San Francisco Bay (a function of tidal ac- 
tion and ground water runoff). Both comput- 
er-aided design and computer modeling are 
finding wide application and are illustrative 
of what is sometimes referred to as the 
"intelligence amplifying" capability of com- 
puters. 



History of Computer Use 



Over the last 30 years, computer systems 
have evolved through stages that empha- 
sized particular capabilities and that have 
altered the way society handles information. 
The nature of these applications has been 
shaped, in part, by the available technology, 
but also by the changing perception of com- 
puters and how they may be used most effec- 
tively. 

Few applications were new, however, at 
least in the beginning. Society has kept 
records and exchanged information for cen- 
turies. It is important to understand this 
background, since many computer impacts, 
both beneficial and adverse, arise from the 



changes in historical information practices 
that occur when computer systems are sub- 
stituted for manual systems. 

Some significant trends in the develop- 
ment of computer applications are discussed 
below: 

» 

Computer trends in the !950\: Increased 
size and centralization. 

In the 1950 s, every announcement of a 
new, larger computer elicited the comment 
that only a few would be needed to serve the 
computer needs of the entire country. 
"Grosrh's Law"— an empirical estimate that 
one could get four times the computing pow- 
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er at twice the cost— provided an economy- 
of-scale rationale for large, centralized 
systems. 

This underlying economic rationale forced 
organizations to pool their computing ap- 
plications in central computer centers that 
would run them on as large a machine as pos- 
sible. This operating style, which can still be 
.seen in many organizations, had two prin- 
cipal drawbacks. 

One effect, seen immediately, was that 
centralization separated the users from the 
computer forcing them to gain access to the 
machine through layers of bureaucracy. 
Some applications were not harmed in such 
an environment. However, delays and bu- 
reaucratic costs inhibited. the work of such 
users as scientists, engineers, and students. 
They often could not perform the type of 
creative work that the computer was ex- 
pected to foster. 

The second effect was more subtle. Kcon- 
omy-of-scale no doubt existed technologi- 
cally-multiplying two numbers was cheaper 
on a larger machine. However, designers had 
to generalize the computer hardware and 
programs in order to handle all of the dif- 
ferent types of applications that had been 
pooled to justify the big machines. Thus, 
preparing a payroll, performing small engi- 
neering computations, and calculating a 
very complicated mathematical model, all 
might be handled by the same computer. 
Some of the theoretical efficiency gain for a 
large general-purpose computer was lost in 
the system overhead required to provide the 
facility for such a variety of applications. 

Despite these drawbacks, computer use 
grew rapidly (luring this period. Most ap- 
plications concentrated on using computers 
both as calculators and as controllers of 
large (for that time) record systems, usually 
kept on magnetic tapes or punched cards. 

Computer trends in the HMXVs The mini- 
computer tint I tunethannn 

In the IHtiO's, motivated by the two 
above-mentioned drawbacks, users on uni- 



versity campuses and in research labora- 
tories developed two design concepts that 
fundamentally altered the way in which com- 
puters would be used— the minicomputer 
and timesharing. 

In tne early years, many scientists learned 
about using computers by sifting at them 
and programing them directly. Chafing at 
the bureaucratic and physical barriers being 
erected around the central system, these 
users developed small, specialized labora- 
tory computers which, although not cheap 
by current standards, were far less expen- 
sive than the centralized systems that often 
cost in excess of a million dollars. These 
small machines, or minicomputers, were 
cheap enough so that a person sitting and 
working at one could afford to use it at less 
than optimum efficiency. The loss of ma- 
chine efficiency was offset by the increase in 
human efficiency. 

The other important concept, "timeshar- 
ing," was developed because a large system 
cost hundreds of dollars per minute to oper- 
ate. Thus, an individual could not engage in 
a rewarding working session sitting directly 
at a large computer, which was dedicated to 
that user, without enormous waste. Humans 
work slowly compared with computers. Con- 
sequently, the computer would be idle most 
of the time while waiting for its user to ini- 
tiate some action. 

Timesharing was designed to make that 
kind of direct use efficient by enabling a 
computer to serve many users simultaneous- 
ly. With such a system, each user sits at a 
terminal. The computer transfers its atten- 
tion rapidly from one user to another, per- 
forming work as needed. Information is proc- 
essed so quickly that the computer, in effect, 
appears to be totally dedicated to the work 
of each user 

Once the concep' of timesharing had been 
incorporated, it became apparent that users 
did not have to be in the same room as the 
machine, but could communicate 1 with it over 
communication lines from across the coun- 
try or from anyplace 1 in the world. 
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Thus, although large centralized systems 
continued to grow for applications such as 
recordkeeping and laborious computations 
for scientific research, the groundwork was 
laid in the 1960*s for new types of computer 
use and new ways of designing systems lo 
meet specific goals. 

Computer trends in the 1970s Commu- 
nication-bused computer systems and net- 
works 

In the 1970s, communication-based com- 
puter systems began to grow. Some types of 
recordkeeping applications were obviously 
handled best by large central computers, but 
to be useful they needed immediate data en- 
try and retrieval of information from remote 
locations. 

Airline reservation systems, for example, 
were among the first large communication- 
based computer systems to be developed in 
the commercial sector. Reserving airline 
seats is clearly a complicated task, well- 
suited to computerization. Agents all over 
the country can now check flight availability 
and reserve seats from their work stations, 
both in "real time." (This term is used by 



technologists to refer to applications in 
which immediate action and response is pro- 
vided by the computer.) 

Another example of a large communica- 
tion-based centralized computer system with 
decentralized access is the one operated 
by the National Association of Securities 
Dealers (NASD), known as NASDAQ 
(NASD Automatic Quotation.) It allows 
securities dealers instant access from their 
desks to the latest bid and ask prices for any 
stock listed on the over-the-counter market. 
The need here was clear for real time access 
to a data base by dealers across the country. 

Another trend in the 1970 s was the link- 
ing together of multiple computer systems— 
both small and large ones— into "networks." 
ARPANET, a project of the Department 
of Defense s Advanced Research Projects 
Agency (ARPA), was an ambitious and tech- 
nically sophisticated experiment that linked 
together several large ARPA research com- 
puters over high-speed communication lines. 
This project was based on a new technique, 
called "packet switching," that allowed ex- 
isting communication lines to be shared 
more efficiently for carrying computer data. , 



Future Trends in Computer-Based 
Information Systems 



Three dominant economic factors can lim- 
it the range of computer applications: 

1. the overall cost of computer hardware 
and the associated economies of scale; 

2. the cost and difficulty of setting up and 
maintaining high-speed data communi- 
cation links; and 

11. the cost of producing software— the 
programs required to operate the sys- 
tem. 

The first two limitations are being over- 
come. While there is still a strong market for 
large expensive systems, (he cost of comput- 



ing hardware has dropped to the point 
where, for many applications, possible econ- 
omies of scale are offset by the overhead 
costs and the inconvenience of a large sys- 
tem. This trend is leading to the reliance on 
multiple smaller systems that are distrib- 
uted geographically. 

Several companies, American Telephone 
& Telegraph and Satellite Business Systems, 
for example, are building commercial data 
commumcation networks that promise to be 
economic, efficient and convenient to use for 
linking together data systems and users. 
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The remaining problem, the cost of the 
software, is the pace set ting factor. 1 Progress 
has been slow in the development of new 
cost-cutting techniques for programing ap- 
plications. For many applications serving a 
sizable user market, programing costs can be 
written off over a much larger user base. 
However, for a number of large specialized 
applications, the programing, maintenance, 
and operation costs will continue to be the 
dominant factors in the cost of using com- 
puters. Some experts see the software prob- 
lem as the major obstacle to new applica- 
tions of computers. For at least the first half 
of the 1980 s, the cost of competent, sophis- 
ticated programing efforts will limit prog- 
ress. 

Based on the findings of this study, the 
use of computers will likely follow these 
trends in the 1980s. 

• Growth in the use of personal computers. 
The small computer will become common 
both in the home and in business. Despite 
their small size, these systems will be 
highly capable— the equivalent of ma* 
ch ch that sold for as much as $1 million 
in the 1950 s. They may appear in the 
guise of video games, television sets, or 
telephones that will also have a computer 
capability available for other purposes. 
This trend will stimulate more widespread 
computer literacy in society, and in turn 
be reinforced by the consequent increase 
in the number of people able to program 
and use computers. The first generation to 
grow up with computers is now reach- 
ing maturity. These "computer literate" 
young adults accept computers as a natu- 
ral part of their world. Computer design 
and use will be taught increasingly in 
school and as part of adult education, and 
will enhance an already thriving market 
for specialized application programs de- 
signed for small computers. 
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• Expansion in the number and size of com- 
puter networks By the end of the decade, 
most computers, even small ones, will be 
connected to a communication network at 
least part of the time. 

The communication system may be ded- 
icated to a single application in which all 
the machines on the netwoik perform por- 
tions of a larger task. Public data net- 
works, on the other hand, provide any 
home or business computer with access to 
a wide range of data bases or special pro- 
grams that may be wanted for occasional 
use. Such multiuser national networks 
that can be interconnected now exist, and 
the number of users is expected to grow at 
a rapid rate. 

• The trend toward information services. 
The computer industry has traditionally 
been concerned with selling hardware 
(desktop, mini, and mainframe computers 
and related auxiliary equipment). How- 
ever, current trends in both pricing and 
the structure of the market are driving the 
emphasis toward providing computer- 
based information services, such as biblio- 
graphic and data base searches, electronic 
publishing, electronic banking, and the 
like. A number of these services will still 
require that the user possess a computer. 
However, many will be offered over data 
communication lines to homes and offices, 
and will be accessible through a modified 
("intelligent") telephone or television set. 
Examples include two-way cable televi- 
sion, videotext, and the AT&T Klectronic 
Information Services experiment that pro- 
vides an electronic telephone directory 
over a telephone line to a home terminal. 
Eventually, information services of all 
kinds will dominate the data processing 
market in terms of dollar volume. (See ch. 
1 4 for a detailed discussion.) 

• The competition among giant corpora- 
tions for the data commumcation services 
market. IBM, AT&T, Exxon, and GTE, 
among others, are preparing to offer a 
variety of data communication services. 
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Large corporations such as these have ac- 
cess to the capital required to install the 
technological base for the planned serv- 
ices, such as communication satellite 
systems and fiber optic transmission 
lines. A series of recent rulings by FCC, 
some still under challenge, are intended to 
clear the way for open competition among 
these and other corporations to provide in- 
formation services of all kinds over com- 
munication lines. Resolution of the pend- 
; ig challenges by the courts or by Con- 
gress will have significant implications 
over the long term for the data com- 
munication industry. (See the OTA tele- 
communication study for a detailed dis- 
cussion. 2 ) 

At the same time, an examination of the 
computer industry (see ch. 14) shows that 
small entrepreneurs have frequently been 
innovators. This observation in no way 
discredits the valuable fundamental ad- 
vances and product innovations origi- 
nating from the research laboratories of 
large firms such as AT&T and IBM. How- 
ever, creative n* i w systems and innovative 
services increasingly arise from small, 
new. "spin-off" enterprises or from totally 
new entrants into the market 

Thus, faced with the dominance of the 
data communication field by large cor- 
porations, others in the information in- 
dustry will press for a public policy that 
will guarantee access to data communica- 
tion networks by smaller firms and new 
entrants that offer information services. 

• Higher level integration of data service* 
Many individual networks for servicing 
specific corporate and governmental 
needs will continue to be built. Some of 
these networks will become integrated. 
For sample, most airlines, car rental 
agencies, and large hotel chains have their 
own reservation systems. It is now tech- 
nically feasible to build an integrated 
system that would provide travel agents 
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access to all of these reservation systems 
through one desktop terminal. 

Similar integrated information systems 
are also feasible in insurance, banking, 
travel, entertainment, law enforcement, 
commodities exchanges, medical services, 
and many other sectors that now use 
several separate information systems. 
There are a number of factors such as 
system incompatibility, antitrust con- 
siderations, or competitive problems that 
may tend to resist this integration in the 
case of some systems. 

• The software bottleneck According to 
many computer and industry experts, the 
increasing capability of computer hard- 
ware is not being fully utilized due to prob- 
lems encountered in creating suitable soft- r 
ware programs for these new machines/ 
The major problems are the relatively 
slow increase in the productivity of pro- 
gramers— their cost efficiency— compared 
with that of the hardware, and the dif- 
ficulties encountered n managing large 
programing projects. 

These problems have created bottle- 
necks in the development of new applica- 
tions. Computer programing has been 
relatively resistant to productivity im- 
provement, at least when compared with 
corresponding improvements in hardware 
performance. Programing is by nature 
labor intensive. Its cost is rising due to 
the increased prog- 4 ming requirements of 
new hardware coupled with a shortage of 
programing personnel with the needed 
training and experience. New mechanisms 
such as structured programing will be 
helpful in engineering computer programs 
and for managing their design and imple- 
mentation. 4 

At the other end of the scale, microtech- 
nology is making possible enormous in- 
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creases in computational power through 
the creation of new hardware structures 
from clusters of small computer chips. 
Technologists know how to physically 
construct such combinations, but not how 
to use them as effectively as their poten- 
tial would suggest. 

Eliminating software bottlenecks may 
be the key to maintaining the lead in com- 
puter technology in the coming decade. In 
Japan, for example, the software problem 



has now been given a very high priority 
for R&D. In the United States, although a 
few defense agencies are investing in re- 
search to solve some of the problems, Fed- 
eral R&D budgets for computer science 
and technology have not accorded soft- 
ware a similar priority. Private industry is 
the source of most activity in this area. 
Reportedly, one-third of the research ef- 
fort at Bell Labs is devoted to the soft- 
ware problem. 
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Chapter 4 

Information in Society 

The Information Society 



An information industry analyst recently 
observed that "every society is an informa- 
tion society." 1 That is, all human organiza- 
tions, no matter how simple, depend for their 
functioning on an intangible resource called 
"information." In any society, information 
serves several purposes. It can be, for exam- 
ple, a commodity of commerce, an indicator 
of wealth or power, a basis for making deci- 
sions, or a source of entertainment. 

The more complex a society, the more cen- 
tral information is to its economic activities. 
The United States seems to be entering what 
some sociologists refer to as a "postin- 
dustrial" period, 2 characterized by several 
trends: 

• emphasis is on a service economy rather 
than on manufacturing; 

• information is used as a resource, as a 
factor of production, and as a commodi- 
ty; and 

• scientific discovery and technical in- 
novation drive economic growth. 

Whether or not this is a valid model of 
societal evolution, the above trends are no 
doubt taking place in the United States. Fur- 
thermore, they are combining to create a 
greater dependence on information process- 
ing and tec mology. 

The tasks being undertaken by the large 
organizations that serve society are growing 
in complexity. The air traffic control system 
handles nearly 20 million flights yearly. 
Every year the financial system clears more 
than 30 billion checks, the U.S. postal Ser- 
vice delivers over 100 billion pieces of mail, 
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and the Internal Revenue Service (IRS) 
receives more than 140 million tax returns. 

The service sector of the economy is grow- 
ing at a relatively faster rate than the in- 
dustrial and agricultural sectors (see fig. 6 in 
ch. 1). Many services such as medicine, law, 
education, and Government involve the 
transfer of large amounts of information. Re- 
sistance to productivity improvements in 
this sector, which represents a large part of 
the economy, has impeded overall produc- 
tivity growth. Greater application of in- 
formation technology has been proposed as a 
chief remedy. For this reason, it is highly 
likely that in this decade the service sector 
will increasingly depend on the use of 
computer-based information systems. 

Greater international economic competi- 
tion coupled with the decreasing availability 
of basic resources are requiring industry and 
Government to both improve and speed up 
their decisionmaking capabilities. Informa- 
tion technology is growing in importance for 
this purpose, Decisions about design, mar- 
keting, financing, and resource allocation all 
require a more sophisticated approach to the 
collection and use of information. 

Computer and communication technol- 
ogies, while not the direct causes of societal 
changes, are facilitating and in some cases 
accelerating them, thus helping generate the 
public policy issu< s confronting Congress. 
Some scholars see profound effects occur- 
ring from the increased dependence on com- 
puter technology, and predict that the view 
of humans as unique thinking beings will 
change fundamentally. 1 Others see signifi- 
cant shifts in the balance of power between 
individuals and the organizations, private 
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and governmental, that would directly affect 
our lives. 4 These highly speculative views 
raise important questions about the effects 
an extremely automated society might have 
on individual freedom. These questions need 
continued examination. 

Some information policy experts take a 
more pragmatic view, one more useful for 
assessing specific public policy issues aris- 
ing from the applications of this technology. 
Their approach stresses these two points: 

1. It is not information technology pp>- «e 
that creates public policy mssu^s,' brut 
the particular choices that are made 
concerning its use. 

2. Most policy problems involving auto 
mated data systems are rooted in tradi- 
tional institutional attitudes and pro- 
cedures. Information systems must be 
assessed in the context of that history. 

According to this view, technology itself 
does not restrict society to particular ac- 
tions but rather provides a widened range of 
choices " Thus, it is not the impacts of a 
technology that are examined, but the im- 
pacts of the particular choices made. The 
nature of those choices is dependent on the 
social and legal environment in which they 
take place. For example, a totalitarian socie- 
ty would build information systems overtly 
designed to enhance Government control of 
its citizens. Such systems would be un- 
acceptable in a democratic society. 

The necessity of considering the historical 
context both of the systems and of the policy 
issues they raise is illustrated by the three 

ca;>e studies in tfie overall assessment. 

*, 

1. The National Crime Information Center 
of the Federal Bureau of Investigation 
is an automated criminal record system 
that has been in existence for only 13 
years. Yet the patterns of its use,' the 
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types of data stored, and the profound 
public policy issues it raises are the 
l&me as those prevalent over the past 
100 years of recordkeeping in the crim- 
inal justice community. 

2. The Fostal Service is nearly as old as 
this Nation, and the telegraph is almost 
150 years old. The distinction between 
physical and electrical transmission of 
messages that has existed for a long 
time without creating serious problems 
is now being challenged. However, over 
the years the Postal Service has become 
an integral part of American society. 
Decisions about its future role with re- 
spect to electronic mail need to take 
into account all of its historical roles: as 
a service provider, as an employer, and 
as an agent for social communication 
and connection on which many.sectors 
of U.S. society depend. 

3. Banking has existed since ancient 
times. Ei' .ronic funds transfer sys- 
tems are .^t so much changing the na- 
ture of banking as they are helping alter 
traditional institutional practices in the 
United States, such as restrictions on 
multistate banking, distinctions be- 
tween types of banking institutions, 
and limitations on types of financial 
services. The issues of privacy and secu- 
rity, which are examined in some detail 
in chapters 6 and 7, historically have * 
seriously concerned the banking com- 
munity, and are thus shaped by its 
traditional attitudes and practices. 

The Nature of Information 

The role of information in society is being 
changed under the influence of new informa- 
tion technology. Some of the changes taking 
place are: 

• Information is hecoming.a significant 
economic commodity, but one with cer- 
tain unique characteristics that dis- 
tinguish it from conventional commodi- 
ties of commerce. 

• The industry providing information 
technology and information services 
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has become a major component of the 
U.S. economy. 

• Many more individuals, both as work* 
ers and as citizens, need mor* informa- 
tion and information technology to 
function effectively. 

Thtas, over the next two decades informa- 
tion technology will likely change production 
processes and commercial goods, transporta- 
tion and working patterns, the nature and 
content of education, the content and style 
of entertainment, and the way social values 
are formed and political decisions made. 

There are three basic values of informa- 
tion: commercial, private, and public (see fig. 
7 in ch. 1). Information technology is chang- 
ing the relative importance of these values 
and throwing them into conflict. 6 

The Commercial Value of 
Information 

Information has been a commodity of 
commerce for centuries. Books and news- 
papers, and in this century the broadcasting 
industry, all sell information. The classic 
reference book on knowledge as a commodity 
was written in 1962. 7 The value of informa- 
tion increases as society becomes more de- 
pendent on it. The very high growth rate of 
the computer-based information industry il- 
lustrates this trend (see ch. 14). 

Information, particularly in a technologi- 
cal environment, has characteristics that 
distinguish it from more tangible com- 
modities. 

• It is reproducible. Its theft does not 
deny it to the original owner. 
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• The cost of its reproduction is usually 
very low compared with that of its 
original assembly or creation. 

• It can be transported instantly any- 
where in the Nation or the world over 
communication lines. 

• Its lifetime, which can be very brief, is 
thus a principal determinant of its 
valu°. 

• Its value is not additive. Two or more 
copies of the same item of information 
are not necessaril> worth much more to 
the possessor than one. 

These characteristics, magnified in some 
cases by the technology, have created policy 
problems with respect to computer crime, 
copyright and patent laws, the flow of data 
between nations, and property tax laws. The 
traditional rules and procedure s of the U.S. 
economic and legal systems ? 4 re oriented 
toward the commercial exchange of tangible 
goods and services rather than of informa- 
tion. ♦ 

The Private Value of Information 

In an information society, economic com- 
petition is often based on access to special in- 
formation, such as a formula for a soft drink, 
an econometric projection, marketing plans, 
or geological data. Commercially important 
information is considered by organizations 
to be proprietary. 

Similarly, individuals often consider in- 
formation about themselves to be private, 
either because damage can be done by its 
disclosure or simply because they desire to 
be left alone. (See ch. 7 on privacy for a more 
complete discussion.) 

The Public Value of Information 

American society has always viewed in- 
formation as having a public value, and has 
asserted the public interest in a free flow of 
information. There are many examples: 

• the public support of libraries, schools* 
and museums to produce an informed 
and literate citizenry; 
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• a tradition of academic freedom and a 
system of open scholarly publication to 
promote the exchange of ideas and the 
advance of research, 

• first amendment guarantees, which en- 
sure an unfettered discussion of politi- 
cal ideas, freedom ot religion, and a free 
press; and 

• freedom ot information laws asserting 
the rights of citizens to know as much 
as possible about the actions of their 
Government. 

These examples suggest that there is an 
assumption that 'American society has a 
right of access to information of various 
kinds, and that it is in the public interest to 
facilitate that access. 

^ This principle has historically brought 
Government into opposition with private 
sector interests. Public education competes 
with private, libraries compete with book- 
sellers, and so on. In the past, these conflicts 
have not been serious. As the information 
society grows, however, and the economic 
value of information rises, conflicts over its 
access and use will increase in severity and 
become more difficult to resolve. Additional 
problems will be caused by changes in the 
technologies for the distribution of informa- 
tion, such as the replacement of certain 



books by aggregations ot articles delivered 
electronically 

The social interest in guaranteeing equi- 
table access to information may conflict with 
the need to encourage private sector invest- 
ment in new information services by letting 
a profitable market develop. It can also be 
argued that improvements in the quality 
of information available to decisionmakers 
both in the public and private sectors would 
reduce errors in the allocation of resources, 
thereby benefiting society as a whole. 

Many Federal agencies— the Census Bu- 
reau, IRS, the Securities and Exchange 
Commission, the Environmental Protection 
Agency, and the Federal Election* Commis- 
sion, to name just a few— collect large and, in 
-most cases, growing amounts of informa- 
tion, which could be personal or proprietary. 
The right of the Government to collect the 
information is established in iaw, pre- 
sumably to further legitimate public pur- 
poses. However, such collection may strong- 
ly conflict with what individuals and orga- 
nizations believe to be their rights of 
privacy, and thereby creates an obligation 
on the Government to protect the informa- 
tion and use it only in carefully prescribed 
ways. 



The Information Economy 



Information plays a significant economic 
role in U.S. society. The number of compa- 
nies that manufacture and supply computer 
and communication services is verv large 
and still growing more rapidly than the 
overall gross national product. The U.S 
computer industry, which sold over 8«l() bil- 
lion worth of hardware in 1979, has a pro- 
jected annual growth rate for the near future 
of around 20 percent, and the worldwide 
communication industry, which in 1979 had 
revenues of over s(i0 billion, has a projected 
annual growt h rate ot about X 1 j percent 



Another measure of the economic impor- 
tance of these industries is that AT&T and 
I MM are two of the largest corporations in 
the world. AT&T ranks first and IBM is 
among the top five American industrial cor- 
porations (The computer indgstrv is ex- 
amined in more detail inch 14 ) 

Information services, a new but increas- 
mglv important industrial sector, use com- 
puter and communication technologies to 
provide 1 new typos ol products and services. 
Some ot these are. 
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• Teletext service, which provides certain 
types of consumer information (e.g., air- 
line schedules, news reports, shopping 
guides) over a regular television broad- 
cast signal. This transmission ot in- 
formation does not interfere with the 
regular video program and can be ac- 
cessed with a special decoder on a 
standard television receiver. 

• Computerize! paging services, which 
provide elaborate remote messaging 
services by means of microcomputers in 
the paging unit itself. 

• Specialized information services, which 
are built into the voice telephone net- 
work. 

This very young, small, innovative, and 
rapidly growing industry will he the ex- 
ploiter of the potentially large consumer 
markets for information technology services 
(Information services are further examined 
briefly inch. 14.) 

In addition to the above-mentioned sec- 
tors of the information economy, .there is a 
much bioader sector. It was first studied 
and characterized in 1976 u In this analysis, 
the two sectors ot the information economy 
were identified as primary and secondary. 

The primary information sector includes 
those who generate and sell information as 
well as those who produce information tech- 
nology, and is much more comprehensive 
than the computer and communication sec- 
tors. Included are typewriter manufacturers, 
newspaper publishers, producers of tiims 
and! >roadwav and television sho»vs. 

The secondary information sector is com- 
prised ot information services and products 
used by any organization tor its own internal 
purposes. Kxamples are internal accounting 
and production, management, and inventory 
control systems, many of which are alreadv 
computerized 
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An examination ot the trends in the work 
force reveals the extent to which the econ- 
omy has shifted. The results of the 1976 
analysis shown graphically in figure 6 (see 
ch 1) illustrate the transitions from an 
economy dominated by agriculture, to one 
dominated by manufacturing, to a service * 
and information economy. It can also be seen 
that the growth of the information sector did 
not start with the invention of the computer, 
but considerably earlier. 

Because macroeconomic studies such as 
these are so broad, they tend to blur the line 
between industries that use information sys- 
tems and those few remaining activities that 
are presently not directly affected by this 
technology. However, the line separating 
these two sectors is shifting rapidly and 
social impacts can flow across it. Thus, for 
example: 

• computer graphics are changing the 
operating style of the film animation in- 
dustry; 

• traditional print publishers such as 
Headers Digest and the Knight-Ridder 
newspapers have invested in new in- 
house computer/communication-based 
information services to reach the public; 

• the nature of public education may be 
transformed by new competing infor- 
mation delivery systems; and 

• computer-based systems for delivering 
television programing tailored to each 
home will change the role of network 
broadcasting in the United States. 

The tr ansformation of much of the in- 
formation industry that is being brought 
about by new information systems will 
change the structure of the industry, the 
nature of the services provided, and the 
skills needed by its employees. 

As technology reduces the cost as well as 
the experience and training required for in- 
formation retrieval, public library services, 
e\en in small cities and towns, will increas- 
ingly supply more and more up-to-date in- 
formation from a variety of sources. In many 
countries, automated card catalogs on ma- 
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nipulatable filmstrips, and newspapers and 
periodicals on microfilm #nd microfiche, are 
expanding the resources of libraries in 
, schools, universities, and industry. How- 
ever, this trend may conflict with the public 
value of information, to the extent libraries 
move in the direction of charging fees for ac- 
cess to electronic information services. This 
would run counter to the current free access 
policies of most public libraries 

Kntire edi turns of newspapers and news- 
letters are centrally written and electronical- 
ly duplicated and transmitted— via satellite 
and microwave -to regional plants where 
they are printed and disseminated. High- 
quality transmission of photographs and 
schematic drawings can accompany the 
texts of these publications in a matter of 
minutes after the text is sent. 



The emerging and expanding information 
technologies are reducing the costs and im- 
proving the accessibility of many kinds of in- 
formation. Their impact is also being felt in 
the traditional hard print industries, which 
must adapt their conventional ways of doing 
business to the new technologies or risk dis- 
placement by more technologically sophis- 
ticated competitors entering the market- 
place. 

Some economists are beginning to exam- 
ine the information economy. They ate build- 
ing information into traditional economic 
theory and modifying economic models to in- 
corporate information as a commodity or fac- 
tor of production. Although this work is still 
in its early stages, it will be important in the 
development of usable economic models for 
the next quarter of a century. 
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The Structure of Information Policy 



Introduction to Information Law and Regulation 



Current policies governing information 
systems are a composite of many specific 
regulations and laws, which are based on 
three main factors: 

1. The areas affected or the regulatory 
concerns (privacy, freedom of informa- 
tion, etc.). 

2. The affected sector of society (banking, 
education, Government, etc.). 

3. The lawmakers and or rulemakers (Con- 
gress, the Federal Communications 
Commission, State legislatures, etc.) 

In the course of this study. OTA identified 
14 areas of law and regulation that affect in* 
formation systems or are affected by them. 
The classification shown in table 4 illus- 
trates the breadth of legal and regulatory in- 
volvement and the range of participants, but 
does not reflect the variety of information 
systems users (e.g., banking, insurance. 
Government, or education). The applicable 
laws and regulations vary according to the 
particular sector involved. 

Such a diversity of concerns cannot be en- 
compassed by any single simple policy for- 



mulation. Computer users face a confusing 
array of laws and regulations unless con- 
sideration is given to their overall pattern— 
their overlaps, their contradictions, and their 
deficiencies. Continuation of the present 
situation could inhibit many socially desir- 
able applications of information systems or 
could create even more intractable policy 
problems in the future. 

The term "information policy" as it has 
been used tr describe the Federal Govern- 
ment's involvement in this area is somewhat 
misleadirg. First, it is too broadly applied in 
reference to a miscellany of issues that in- 
clude, for example, the regulation of files of 
personal data, Federal support of the Na- 
tion's libraries, first amendment rights for 
newspapers, and property rights associated 
with information products such as programs 
and data bases. 

Second, the term appears to suggest that 
there is or should be a single uniform policy 
governing all the uses of information sys- 
tems both in the public and private sectors. 



Table 4 — Principal Areas of Law and Regulation Regarding Information Systems 



Area O f C >n ^rn 
Privacy 

Freedom of information 

First amendment 

Fourth amendment 

Due process 

Commumrat.ons r e qu a* 

Compute r rnme 

Propnef fv nqrvs 

Evidence 

Liability 

Antitrust 

Taxation 

Government provision o 1 , 
Government p'ot r~Tr 
information sys'etrs 



State 
x 
X 



Federal 
X 



Pequiatory 



Court 1 

X 
X 
X 
X 
X 
X 

X 

* 

X 
X 



International 

X 
X 
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In fact, no such policy exists, nor does one 
appear to be likely. 

The analysis made by OTA has led to 
these findings: 

• There appears to be neither a strong 
trend nor sentiment at present among 
policymakers in favor of a uniform Fed- 
eral information policy that would en- 
compass all the problems that could 
arise from the many possible uses of 
data systems.* 

•Some reierilU proposed legislation would establish a com 
prehensive approach to imam specific problem areas e # 
pruaiv and freedom of information See M K IMB^ Mf»ih 
(onK Omnibus Ki^hl to Pmai\ \< i of 1979 Also the 
National Telecommunications and Information \dmmistra 
tion < NTI \» of the Department of Commerce* has made an ef 
fort to formulate-or at least develop a framework for na- 
tional information polu ies See \rthur \ Hushkin and Jane 
H >urow I t,>,tnti<ittnn<. o/ I wu<l States Informutmn 
Polax Washington DC \'\[,\ June \'**0\ and Jane H 
Vunm.etal l^urs in In'nrmatton Pnlt* \ Helen \ Shaw 
led f \TI \ Kebruarv 19*1 



• There are numerous laws and regula- 
tions, some overlapping and some po- 
tentially or actually conflicting, that 
directly and indirectly affect the users 
of information systems, the consumers 
of information services, and the sub- 
jects of personal information data 
banks. 

• There is a lack of congressional focus on 
information policy as such, and conse- 
quently the emerging issues are not be- 
ing directly addressed.* 



♦The Paperwork Keducnon Act of 1980 *Pubhc Law 
% -*>1U enacted by the 96th Congress does set out a more 
comprehensive policy and management approach for Federal 
Government information s\ sterns ^ The Act establishes 
within the Office of Management and Budget an Office of In- 
formation and Regulatory Affairs and assigns to that Office 
a broad range of authorities and required actions 



Structure of Policy Issues 



Few attempts have been made at integrat- 
ing the whole range of policy issues covered 
by the term "information. " The subject area 
relating to computers and public policy, how- 
ever, is being increasingly analyzed. A wide 
range of intellectual approaches are being 
taken, from narrow quantitative studies of 
the impacts of information systems on cor- 
porate decisionmaking and the problems 
associated with implementation, 5 to broad 
philosophical and historical examinations of 
the long-term social effects of automating in- 
formation systems.' 1 4 



Henr\ !.ura- U//\ ln;nr mil t>nn S\>fi/»i, /-./// "\ev* York 
Columbia \ mversjt\ Press |»»7"n 

James Rule Pri* >xU f r * «. an i V ihh* Sun t v S<>< ml 

( nntml m 'hf ( nmputrr i\ew V>rk s t ho* ken Book 1 * 

'K I.audon ( nmput* s <rui H'muiut Mfo lit jurm [V>* 
York V\ile\ Inters ien< e 1^7 4' 

' \bb\ MowshoHit/ I hi ( n tt * \\ u 'i Infnrmat.nt 
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Several studies have been carried out and 
commissions formed to examine various as- 
pects and issues related to information pol- 
icy. In the field of privacy alone, for example, 
there have been a study project by the Na- 
tional Academy of Sciences, 5 an advisory 
committee to the Secretary of Health, Edu- 
cation, and Welfare, a Privacy Protection 
Study Commission, and a number of studies 
and hearings conducted by congressional 
committees. Of the more than 1,500 legisla- 
tive proposals submitted to either the House 
or the Senate during the 95th Congress, 74 
new public laws emerged dealing with some 
aspect of information law or policy. O f se, 
26 dealt with privacy, disclosure of ii ma- 
tion, confidentiality or controls on cu. nd 
transactions using computers. 6 



Man U est m and Michael «\ Baker Data hanks in a Frvp 
Sur ,t f \ York Quadrangle Hooks, 1 «|72i 

'I S Hou>M of Representatives Committee on House \d- 
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Another indication of the extent of activi- 
ty is the Congressional Research Service 
Listing of New and Completed Projects. It 
covers ongoing work and projects completed 
within the last 6 months that have been car- 
ried out by the Congressional Rf 3earch Serv- 
ice, the General Accounting uffice, the Of- 
fice of Technology Assessment, and the Con- 
gressional Budget Office. The most recent 
listing available to this study, published on 
August 25, 1980, described nearly 100 proj- 
ects concerned with computer and telecom- 
munication policy. The issues addressed by 
all of these activities can be classified under 
one or more of the categories shown in table 



System Issues 

The policy issues related to information 
systems per se focus on their design, im- 
plementation, and operation. They generally 
are concerned with whether the system per- 
forms the tasks expected of it with reliabili- 
ty, with appropriate security, and in an effi- 
cient and timely manner. These objectives 
mainly are of interest to the organization 
operating the system, and place major con- 
straints on the system designer. 



Other system issues include the proper 
role of users in system design, the need for 
user education, and how to deal with poten- 
tial system impacts on the organizations, 
work groups, and individuals involved. 
While skilled technically, system designers 
may not fully appreciate the implications for 
users. On the other hand, users frequently 
do not understand enough about the system 
itself. 

Technical, operational, and reliability fac- 
tors all can h^ve broader societal signifi- 
cance even though they originate in the 
operational goals of the system itself. In re- 
cent years, for example, public attention has 
been focused on areas such as: 

• the safety and reliability of the air traf- 
fic control system; 

• the reliability, security, and control- 
lability of military command and con- 
trol systems, existing and proposed; 

• the security of large-scale electronic 
funds transfer systems; and 

• the reliability, accuracy, and respon- 
siveness of the social security informa- 
tion systems. 

There is a strong societal interest in the 
proper and reliable technical operation of 



Table 5 —Structure of Information Policy Issues 



Level o f issue 
System leve 1 



Information level 



Secondary f.nln 



Lrinq term iPtal »»fWf< 



Character of issues 
Reidte to the design implementation and 
operation of particular information systems 



Relate to the handling of data collection, 
storage use, and dissemination 



E<is! independent of the particular 

information systems but are < hanged in 
magnitude or character by use of 
technology 



Long range societal impacts that are not 
currently reflected in specific policy 
problems but which may ultimately affect 
the nature of U S "ociety 



Example issues 
Government procurement policy 
Efficiency and economy of operation 
Security of information systems 

Privacy (recordkeeping) 
Freedom of Information regulations 
Copyright and patents as related to 
computer programs 

Privacy (surveillance) 
First amendment rights 
Fourth amendment rights 
Social vulnerability 
Federal State relations 

Privacy (social attitudes) 
Psychological self image of humans 
Education needs 
Socal political effects 
Cultural impac ts 
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each of the systems cited above, and poten- 
tially high costs to society if they fail. The 
public policy issues that arise are those 
associated with the formulation of a frame- 
work within which to develop the systems, 
to establish accountability for their design 
and operation, to assign responsibility for 
correcting their defects, and to mitigate the 
impacts of system failures. 

Information Issues 

Various laws and regulations affect the 
use of information, independent of the par-' 
ticular technology employed in handling it. 
As we become more and more an informa- 
tion society,'' these legalities have a cor- 
respondingly greater impact on the activ- 
ities of individuals and organizations. Since 
the laws and regulations arise from many 
sources and thus do not reflect a single 
coherent v a w of the role of information in 
society, they tend to conflict and to have un- 
intended effects on the operat: ,ii of informa- 
tion systems. Consequently, they can create 
unanticipated secondary effects. 

The three differing fundamental values of 
information— commercial, private, and pub- 
lic—discussed in chapter 4 motivate the laws 
and regulations affecting information. Indi- 
vidual regulations or laws usually address 
only one aspect of information. Policy issues, 
then, arise from the inherent tensions be- 
tween the particular values reflected in dif- 
ferent laws. Congress is called on to estab- 
lish equitable balances. For example: 

• Freedom of information laws (reflecting 
public value) can conflict with individu- 
al or proprietary concerns (reflecting 
private values). For example, in serving 
the public interest. Government collects 
an extraordinary amount of information 
about citizens, businesses, and other 
types of organizations. Some of this in- 
formation that theoretically has been 
available to the public by law for a long 
time has been protected, in fact, by the 
amount of effort required to retrieve it 
from manual recordkeeping systems. 



Automated systems reduce the cost 
and time barriers to wider access to 
these public records, and thereby may 
accentuate the issue of the extent to 
tfhich this information can and should 
be publicly available. 

• As information becomes a more valu- 
able commercial commodity, increasing 
tensions are arising between those who 
wish to sell it through new information 
services, and those who recommend 
that the Government take steps to pre- 
vent the social inequity that would 
possibly result from the increasing cost 
of access to information and the means 
to use it. For example, the conflict is 
likely to become heightened between 
the evolving role of the public libraries 
as seen by the librarians, and the new 
companies that wish to sell similar in* 
formation services to the home. Related 
tensions stem from the competition 
between Government-collected data, 
mad^ available through freedom of in- 
formation laws, fed commercial data 
services. In addition, commercially mar- 
ketable information may invade privacy 
or proprietary rights. 

• The controversy over the public v. the 
commercial value of information is ex- 
emplified by the present difficulty that 
the United States is having in formulat- 
ing a consistent national position with 
respect to international negotiations 
concerning information transmission 
across borders. Laws have already been 
promulgated by several European na- 
tions restricting the flow of personal or 
corporate data across their borders. 

Some positions taken by the United 
States appear to advocate the free flow 
of information on the premise that in- 
formation is a public good, and there- 
fore should be allowed to flow freely be- 
tween countries. The United States ap- 
pears to emphasize the commodity- 
related aspects of information, main- 
taining that controls or restrictions are, 
in effect, restraint of trade. While this 
position would presumably allow U.S. 
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multinational firms to more freely de- 
liver and sell information services 
across borders, it may have adverse im- 
plications for the international protec- 
tion of individual privacy. 

, ' Secondary Policy Impacts 

Computer-based information systems, by 
increasing the quantity of information col- 
lected, the efficiency of its collection and 
dissemination, its utility, and its ease of 
storage can cause qualitative changes in the 
behavior of Government, individuals, and 
organizations as well as in the nature of 
traditional conflicts. Thus, the use of auto- 
mated information systems can have second- 
ary effects on policy problems that have ex- 
isted for years, and which in many ways are 
independent of the technology. Because 
much more information can be obtained, 
handled, processed, and distributed so much 
faster, oil problems are not merely exace 
bated, but new ones are created. 

For example, the increased scale and 
presumed efficiency of automated criminal 
justice recordkeeping intensifies the tension 
society has always experienced between the 
needs of law enforcement and the individual 
rights of citizens. Similarly, the tendency of 
the technology to encourage centralized 
record systems creates problems of Fed- 
eral/State relationships, a particularly 
touchy issue in law enforcement. Some ex- 
perts believe this centralization trend could 
reverse through the use of smaller comput- 
ers with distributed data bases. The OTA 
study of the National Crime Information 
Center Computerized Criminal History sys- 
tem, being conducted in parallel with this 
study, examines this set of issues and rela- 
tionships in detail. 

Electronic mail will once more raise issues 
of the inviolability of the mail The rules 
governing access are different for letters and 
for telegrams. Which will take precedence in 
the new environment? Will the first amend- 
ment rights enjoyed by the printed news 
media or the tradition of the Federal Com- 



munications Commission's regulation of con- 
tent be the pattern for protecting the new 
electronic information media? 

Ongoing issues such as privacy, security, 
and social equity are still not resolved. Elec- 
tronic funds transfer (EFT), by changing the 
scale and nature of information collection 
and storage in an environment of acceler- 
ating institutional changes in the industry, 
may be forcing the reconsideration of such 
issues in a totally new technological context. 
The OTA study of EFT, being conducted in 
parallel, Examines these issues in greater 
detail. 

Computers may not only cause policy 
problems but may also be useful in solving 
them, and information systems may have 
policy impacts that mitigate or enhance the 
resolution of other policy conflicts. For ex- 
ample, it has been suggested that a central 
computer file containing information about 
citizens and employable aliens would be 
useful in verifying employability while 
avoiding the complicated problems created 
by a national I.D. card. (This suggestion is 
not intended to be an endorsement of such a 
system.) Transmitting electronic mail in a 
coded form (encryption) could help resolve 
social concerns over wiretapping or mail 
tampering. Services available through EFT, 
such as check authorization/guarantee and 
debit cards, can facilitate payment by other 
means than cash and thereby provide an ad- 
ditional convenience to customers. 

Long-Term Societal Effects 

Social scientists engaged in futures 
studies have suggested that the information 
revolution, spurred both by advances in 
computers and communication and by the 
changing role of information in U.S. society, 
will have profound long-term effects as dra- 
matic as those caused by the invention of the 
printing press. 

While such effects may, in fact, be socially 
significant in the long term, they are also the 
most difficult to predict and to relate direct- 
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ly to particular public policy choices. For ex- 
ample: 

• The nature of societal values attached 
to privacy in the United States may 
change if larger and more ubiquitous in- 
formation systems gradually remove 
the ability of individuals to hide their 
private activities. The permanency of 
data storage and ease of recall can limit 
a criminal's.ability to start over with a 
clean slate. It has been pointed out that 
the possession by large organizations of 
personal data on individuals enhances 
the power, real or perceived, of the 
organization over the person. 7 8 These 
and simila- effects may increase the 
suspicion some citizens have of large 
organizations— business, labor, or Gov- 
ernment—and thus erode social cooper- 
ation and a personal sense of well-being. 

• The self-image held by humans of their 
uniqueness, distinguished by their abili- 
ty to think, may be threatened by the 
association with machines that inereas- 
ingly demonstrate apparent character- 
istics of intelligence. 4 Computer scien- 
tists disagree about whether truly "in- 
telligent" systems can ever be built. In 
the creation of social attitudes, how- 
ever, the perception of machine omnipo- 
tence may be as important as reality. 
The best chess machines already can 
beat 99.5 percent of human players. 

One effect of such a perception may 
be to increase the uncritical reliance on 
computers. 1 " The general public s un- 
questioning acceptance of computer 
output has concerned computer experts 
for many years, and may be a contrib- 
uting factor in criminal acts that use 
computer-generated information to es- 
tablish credibility. 

• Just as the printing press, by stim- 
ulating literacy and speeding the flow of 
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ideas, supported the Renaissance and 
the tran.sition from medieval society to 
the age of enlightenment, so the new 
information systems could profoundly 
transform the social and political envi- 
ronment of U.S. and world society. 
Indeed television and sophisticated 
computer-based polling technology 
have already had observable effects on 
the political processes in the United 
States. Third World leaders calling in 
UNKSCO for a 44 new world information 
order" express the belief that informa- 
tion technology will have a central influ- 
ence on the social and economic devel- 
opment of their countries as well as on 
international relationships. 
• The effects of information technology 
on culture have received little study. 
Years ago, the noted Canadian econom- 
ic historian Harold Adams Innes (and 
later his student, Marshall McLuhan) 
discussed the orofound effects on cul- 
tural biases exerted by the forms in 
which information is communicated. 11 ]I 
Scholarly opinions differ concerning 
the nature of these effects. Some see in 
broadcast television a lowering of social 
values and a reduction in literacy, a 
debasing of culture resulting from mass 
communication. However, a single tele- 
vision broadcast of a Metropolitan 
Opera performance reaches more view- 
ers than have attended the Met in all its 
years of existence. Has "Sesame 
Street" improved the educational level 
of its viewers, or has it conditioned 
young children to a short attention span 
and to an orientation toward learning as 
entertainment, unsuitable for serious 
academic work? 

This overview stud> has not attempted to 
address in detail these broader questions. 
The conflicts and problems are only ick*n 
tified here. (liven the potential for signifi- 
cant social change, good or bad. research 
funded publicly, privately, or in some jointly 
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developed projects could provide valuable in- 
sights into the long-term societal effects of 
computer-based information systems and 
related public policy choices. 

The categories shown in table 5 are not in- 
dependent of each other. Policies at various 
governmental and industrial levels interact 
with one another in areas such as the econ- 
omy. In a similar way. there is a complex in- 
teraction between the categories. Procedures 
set for system operation may affect prob- 
lems of information handling in response, for 
example, to privacy regulations. Rules for 
the handling of information may exacerbate 
or mitigate secondary policy impacts. On the 
other hand, they may aho affect the way in 
which specific systems are designed and 
operated. 

Various concerned parties view these 
issues from their particular perspectives. 
For example, an agency wishing to install a 
major new information system may be moti- 
vated by considerations of system utility: 
whether the system will do its intended job 
and be economical to run. and whether the 
procurement has been handled fairly. Con- 
* gress. in addition to being interested in the 



system s effectiveness, also wants to know 
whether it satisfies a broader set of re- 
quirements, for example, whether it con- 
forms to a number of information policy con- 
straints such as protection of civil liberties, 
individual privacy, or freedom of informa- 
tion laws, and how the system might affect 
these as well as other less well-defined 
secondary policy issues. 

Finally, as critics of information technol- 
ogies and systems express concerns about 
the long-term social effects that may or may 
not occur, it has become apparent that these 
effects would be difficult, if not impossible, 
to address solely through a legislative ap 
proach. Congress can only seek to establish a 
legislative basis for creating a balance be- 
tween the public/social values, the commer- 
cial/economic values, and the privacy/propri- 
etary values associated with information. 
The stresses within that triad remain in a 
dynamic state. They are exacerbated or 
mitigated by many other social factors in ad- 
dition to lawmaking and policy formulation. 
Society has not as yet learned how to predict 
the consequences of manipulating the nu- 
merous factors involved. 
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Chapter 6 

Innovation, Productivity, 
and Employment 

Introduction 



Innovation, the continual generation of 
new technological ideas and products and 
services based on those ideas, is a prime req- 
uisite for a healthy industry in a high tech- 
nology field 'ongress and the executive 
br aneh have been particularly concerned 
about possible economic and regulatory in- 
centives to innovation The Congressional 
Research Service (CRS) identified 30 sep- 
arate bills concerned with stimulating inno- 
vation that were considered by the 96th 
Congress. 1 A major executive branch study 
coordinated by the Secretary of Commerce 
culminated, in October 1979, in a Presiden- 
tial message to Congress on industrial inno- 
vation, in which a number of measures were 
proposed.' 
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Information technology is central to these 
concerns. Computer and communication 
technologies are moving ahead so rapidly 
that products can become obsolete within a 
few years. Thus, although the United States 
holds a substantial positive balance of trade 
in certain areas of computer technology, the 
maintenance of this balance depends on con- 
tinued research and development (R&D). 
Because of aggressive import competition 
from Europe, Japan, and Canada, even do- 
mestic markets are vulnerable to any falter- 
ing in the technological lead. A parallel OTA 
study is examining U.S. industrial com- 
petitiveness in the international electronics 
and computer markets. J 
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Research and Development 



The structu"^ of innovation and product 
development in the computer industry is 
unusual, even for a high technology field. 
Basic research in computer science, which is 
largely carried out in universities, is based 
on the technology rather than on physical 
laws, 1 Thus, the leadtime between a fun- 
damental theoretical advance in computer 
science and a practical application is, in 
general, relatively short, a few years or less. 



Because of this close connection between 
technology and research, the vitality of the 
computer industry is in part dependent on 
the vitality of academic computer science. 
However, university departments of com- 
puter science are experiencing problems. 5 
Rapidly growing departments face competi- 
tion with private industry for the talented 
faculty needed to do the research and to 
train new experts. This situation is par- 
ticularly critical in systems design and soft- 
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ware engineering The departments also 
need to invest in the facilities necessary 
for R&I) and in experimental* computer 
science. 

Several U.S. corporations in the informa- 
tion industry, realizing that their success 
depends on continued innovation, have 
established their own large research centers. 
Bell Laboratories in the United States and 
IBM both here and overseas are notable ex- 
amples. These centers produce outstanding 
basic and applied research, and are also im- 
portant links between the basic research car- 
ried out in the universities and the needs of 
industry. 
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Another aspect of innovation in the in- 
formation industry is the role played by 
small entrepreneurial firms in new product 
development. Many specialized areas at the 
leading edge of information technology are 
dominated by relatively small new com- 
panies (see ch. 14). Indeed, some experts in 
the industry suggest that one important pat- 
tern for innovation in information technol- 
ogy involves an entrepreneur who develops a 
new product and then forms a company to 
produce and sell it. If successful, the new 
company's need for capital expands. Fre- 
quently in the last decade, the only choice for 
the small company to meet this capital need 
was to be acquired by a larger firm. This is 
still the predominant goal of most high tech- 
nology, high growth companies, although a 
few have been able to reach the public 
market 



Productivity 



In the 1970 s, the rate of productivity 
growth in the United States fell far below 
historical trends, causing concern in Govern* 
ment and industry. In addition to providing 
the basis for an increased standard of living, 
productivity growth is a major defense 
against inflationary pressures, especially 
those caused by cost increases for externally 
provided resources such as oil. (Electronics 
and agriculture, two sectors that have ex- 
perienced very high productivity growth 
rates, have supplied the principal exports 
offsetting the large international trade im- 
balance due to oil imports.) Productivity 
growth also provides the leeway to meet cer- 
tain societal goals, such as a more equitable 
distribution of basic goods and services like 
food, medical care, and education. 

Although not all economists agree on the 
causes of the productivity lag, four main fac- 
tors in the last decade have commonly been 
noted by various experts. 



growth of 
economy. 



the 



service sector of the 



• entry into the job market of a large 
number of young and inexperienced 
workers, 

• decline in the rate of technical innova- 
tion and investments in R&D, and 

• growing Federal intervention in the 
form of regulation and tax policies that 
discourage innovation. 

There is reason to believe that innovation 
in computer technology can help productivi- 
ty growth in the United States. In addition 
to lower cost and/or better quality retail con- 
sumer products, the new technology also 
generates improved techniques and tools for 
making those products. Experts have noted 
the positive correlation between innovation 
rates and productivity in several industries. 6 

Based on anticipated advances in artificial 
intelligence, robotics, computer control, and 
input-output technology over the next few 
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years, computer-based factory automation 
will make a substantial contribution to im- 
proving manufacturing productivity. Word 
processing and other forms of office automa- 
tion are already responsible for improving 
clerical productivity and may have similar 
potential for managerial productivity. In- 
telligent cash registers and automated 
checkout are directly improving the produc- 
tivity of retail clerks and indirectly the pro- 
ductivity of retail management (e.g., ac- 
counting, inventory control, procurement). 
Automated bank tellers (teller machines) are 
reducing the service loads on human tellers. 
The full impact is yet to be felt of these and 



other applications that are only now starting 
to be installed in the service sector. How- 
ever, they are likely to help restore an up- 
ward trend in the Nation's productivity. 

From a larger societal perspective, the in- 
creased productivity brought about by ad- 
vances in computer technology may be re- 
flected not only in greater output per 
employee, but perhaps also in terms of better 
product quality, improved work environ- 
ment and job satisfaction, and longer term 
social benefits such as improved : ob safety 
and greater opportunities for on-the-job 
learning and career advancement. 



Unemployment 



It is self-evident that any innovation that 
creates new products and new industries will 
eliminate some jobs only to create others. 
Structural shifts in the economy will occur to 
the distress of the temporarily displaced. 

An innovation that creates a demand for 
highly skilled programers while eliminating 
the jobs of low-level clerical workers causes 
hardship through a short- to medium-term 
increase in unemployment. In certain indus- 
tries, such as insurance, automation has 
caused a significant reduction in clerical 
staff. 

Some believe that the nature of labor dis- 
placement should be examined in more detail 
since there are likely to be marked dif- 
ferences between the well-recorded experi- 
ence of computing technology's first quarter 
of a century and the coming decades. Some 
of these differences are said to include: 

• (Reaper and readily available com- 
munication and computer technology, 
which allows previously labor-intensive 
jobs— such as sales clerks, bank tellers, 
and secretaries— to be automated. 

• New research results in fields such as 
process control, robotics, and the inter- 
face between humans and machines, 
which widen the applicability of com- 



puter automation. The "automated fac- 
tory,' ' a completely automated shop 
capable of manufacturing a wide varie- 
ty of products on demand without 
human intervention, may become a 
reality in the next decade or two. 

The assessment of the role of the U.S. 
Postal Service in electronic mail is the only 
study in OTA s examination of three nation- 
al information systems to specifically look at 
employment impacts. Preliminary research 
results suggest that electronically trans- 
mitted mail would likely eliminate postal 
jobs as the volume of conventional mail de- 
creases. However, it appears that the rate of 
such job displacement would be unlikely to 
exceed ordinary attrition. Further research 
is focusing on the rate of job displacement 
and possible geographical discrepancies, the 
need for job retraining, the impacts on levels 
and costs of service, and the broader implica- 
tions for the future of the U.S. Fostal Ser- 
vice/ 
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Issues 



Congress will be confronting a number of 
issues concerned wnh innovation m com- 
puter technology and its effects on produc- 
tivity and employment 

KM) Support 

For a number of years the vitality of V S 
science and technology has depended, in 
part, on Federal support In times of low pro- 
ductivity gains, taxpayer resistance to in- 
creased governmental spending is under- 
standable as pressure grows to trim pro- 
grams, such as R&I), that do not satisfy 
immediate needs. There has been a similar 
tendency by some sectors in private in- 
dustry to cut R&D budgets when money is 
tight. Industry also cites tax disincentives 
to R&D investment, particularly prior to the 
197H capital gains tax reduction. 

Innovation in information technology im- 
proves the productivity of the information 
industry itself and also offers the tools for 
improving the productivity of many other 
sectors of the economy. Therefore, some 
believe Federal R&I) support is a wise 
policy, particularly in light of international 
competition for the same markets 

Research in basic computer science is sup- 
ported by the National Science Foundation 
(NSF), the Office of Naval Research, the Ad- 
vanced Projects Research Agency, and to a 
lesser extent by a few other agencies. Ap- 
plied R&D is supported by NSF and by mis- 
sion agencies such as the National Aero- 
nautics and Space Administration and the 
Department of Energy, although the major 
part of development support comes from the 
Department of Defense. One issue to con- 
sider is whether research in the applications 
of computer technology to problems in the 
private (civilian) sector— in such areas as 
education, health, transportation, environ- 
mental quality, and job safety— is receiving 
adequate Federal support, given the critical 
nature of computer technology to the Na- 
tion s well-being. 



Computer Impact Research 

The very applicability and power for 
change inherent tn computer technology 
that makes it so promising as a means of 
solving many societal problems has raised 
concerns that it might also have negative ef- 
fects. Many computer and social scientists, 
aware of these potential problems, have been 
developing a tie 1 \ of research on computer 
impacts." Professional journals have been 
started, courses are being developed, and a 
few computer scientists are describing their 
principal professional interest to be "com- 
puter impacts." To date, however, it has 
been difficult to secure much Federal sup- 
port for research because this subject does 
not comfortably fit into traditional scientific 
basic research programs, and because the 
products of early research tended to be of 
mixed quality. 

Computer impact research is not pure 
computer science; neither is it classifiable as 
purely social or political science. It is also of 
no direct interest to the mission agencies, 
such as the Departments of Energy and De- 
fense. However, the kinds of dat^ and ideas 
that could be generated by long-term re- 
search in the societal impacts of computers 
could supply valuable input to the executive 
branch and to congressional agencies such 
as the General Accounting Office, CRS, and 
OTA. In addition, this research could help 
public officials and administrators gain a 
broader perspective of the social, economic, 
political, and institutional issues involved 
with managing information resources and 
technology in Government/ 1 
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Employment 

It is still uncertain whether the produc- 
tivity increases brought about by computer 
technology will create or eliminate jobs. It 
would be helpful to know more about the 
long-term effects of automation. It is 
assumed that there will be some local struc- 
tural impacts Even if new jobs are created 
or old ones redefined, not all workers will 
find it easy or desirable to shift. This disloca- 
tion could result even when an official policy 
of no job loss has been established by a com- 
pany, if employees are unwilling or unable to 
adapt themselves to the new technology or 
prove to be untrainable in the new pro- 
cedures. 

One OTA advisory panel member ob- 
served that, in periods of high demand and 
relatively full employment, labor displace- 
ment is unlikely to occur; however, when try- 
ing to pull out of a period of high unemploy- 
ment there is greater incentive for firms to 
make productivity gams by investing in 
automation rather than increasing their 
labor force. Substituting machines for labor 
is easier when it can be done by not hiring 
when market demand for the product in- 
creases rather than having to fire. 

On the other hand, it can be argued that 
the rising consumption of goods and services 
by the developing world will create a very 
large demand. Consequently, gains would be 
turned into increased production rather than 
decreased labor input. 

Effects of Government Policy 
on Innovation 

Innovation seems to be very sensitive to a 
variety of governmental policies. Thus, when 
exploring the potential impacts of new laws 
and regulations, Congress needs to be sen- 
sitive to possible unintended effects on the 
innovative process. For example: 

• Taxation. Industrial investment in in- 
novation is very sensitive to tax pol- 
icies, particularly those that encourage 
or discourage capital formation for new 
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firms, tor K& I) expenditures, and for in- 
vestments in new processes and equip- 
ment. 

• Antitrust: The purpose of antitrust en- 
forcement is presumably to encourage 
competition and, hence, innovation. 
Some experts hold, however, that major 
antitrust actions or threats of such ac- 
tions against companies that are large 
principally because of a successful 
record of innovation may dampen their 
enthusiasm for further product develop- 
ment. 

• Regulation. Regulation can encourage 
or discourage innovation depending on 
how it is applied. Regulators either try 
to direct innovation toward particular 
societal needs (as in the cases of auto- 
motive safety or environmental protec- 
tion), or to control it for social protec- 
tion (as in the cases of food and drug 
safety). The second order effects of this 
innovation can dampen innovation else- 
where as industrial investment must 
first respond to the regulatory demand. 
Only the remaining capital is available 
for investment. 

• International controls: Multinational re- 
strictions on the flow of data and com- 
puting hardware across national bound- 
aries affect the design of communica- 
tion-based information systems, and to 
some extent shape the nature of compe- 
tition in the international marketplace, 

• Standards- Federal standards,* volun- 
tary or mandatory, directed at Govern- 
ment or private sector applications can 
also shape the nature of innovation and 
competition. On the one hand, for exam- 
ple, some argue that standards for data 
processing compatibility will encourage 
a competitive industry to develop 
around so-called "plug-compatible 
equipment" (independently manufac- 
tured devices that plug into computers 
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mnde by major firms such as IBM). On 
the other hand, the premature imposi- 
tion of standards can freeze the technol- 
ogy at an early stage and inhibit the de- 
velopment of new products and ideas. 

What the United States does on its 
own here may become moot in the 
longer term. International data stand- 
ards are developing rapidly. In the 
United States, the National Bureau of 
Standards has coordinated the U.S. 
position. The objective of the Interna- 
tional Standards Organization is to 
have, before the end of the 1980 s, com- 
patible protocols and interfaces to allow 
any one computer to "talk" to any 
other. Within the United States, pres- 
sure in this direction is being exercised 
through the mandatory Federal In- 
formation Processing Standards for 
Federal Government procurement. 



The Federal Communications Com- 
mission is presently struggling with the 
problem of videotext.* Many broad- 
casters and manufacturers have re- 
peatedly maintained that they cannot 
invest in developing hardware and serv- 
ices to support such service until they 
get a clear message on standards. 
Others argue that the technology is so 
new that standards at this time could 
inhibit new developments. 10 In short, 
the relationship between standards and 
innovation is not well understood, and 
could benefit from further study. 
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Chapter 7 

Privacy 

Historical Context 



Policy issues related to privacy date hark 
many years before the existence ot com- 
puters 1 Such issues as the following have 
long concerned Congress and the Court 1 *. 

• Government infusion - the right of the 
Government to physically intrude on 
the premises or in the belongings or per- 
sonal effects of an individual. 

• Surveillance of communication—the 
right of the Government to intercept 
communication by reading mail and 
monitoring telegraph traffic, by wire- 
tapping telephone conversations, or by 
inspecting envelope exteriors to make a 
record of the senders (mail covers). 

• Liability v. the first amendment — the 
right of authors to write— and publish- 
ers to print— within very broad limits, 
any information about a person or insti- 
tution, whether such information is true 
or false, authorized or not. 

• Privileged communication— the right of 
the Government to seek information 
conveyed under certain special circum- 
stances, such as psychiatric treatment, 
religious confession, legal counseling, or 
media news-gathering. 

These examples not only convey the his- 
torical nature of privacy debates but also the 
extraordinary range of issues encompa^ed 
by the term. 

Privacy as it relates to computers has 
been more narrowly construed. Historically, 
the principal discussion has been concerned 
with computerized banks of information 
about individuals, the collection of sue! 
data, and the uses made of it. A chronology 
of major events in the development of policy 
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on recordkeeping practices is shown in table 
b. In addition, a number of influential hear- 
ing records and reports have been issued by 
Congress. 

Recordkeeping has not been the only area 
of privacy that has concerned Congress. 
Over the last two decades, hearings have 
also been held on subjects such as wiretap- 
ping, psychological testing of Government 

Table 6 —Significant Milestones in the Development 
of the Recordkeeping Issue 3 

C 1164 Proposal for a National Statistical Center and 
the resulting public debate on privacy and 
Government data systems — culminating in a 
series of congressional hearings 

1%7 Alan Weslm s influential book Pnvdt y and 
f- reodom r 

11/0 Fair Credit Reporting Act provisions regarding 

rredit records on individuals ■ 
1971 Arthur R Miller s book The Assault on Privacy 

Computers Data Banks and Dossiers ' 
19/2 National Academy of Sciences report Databanks 

m j Free Society ' 
19/3 H*>d ! !h Education and Welfare Sec retary s 

Ad isory Committee on Automated Personal 

Dj! i Systems report Records, Computers and 

the Rights of Citizens ' 
1974 Family Educational Rignts and Privacy Act 

controlling access to educational records i 
1474 Pnvacv Act of 1974 enacted h 
197/ Privacy Protec tion Study Commission report 

Personal Privacy m an Information Society ' 
1978 Right to Financial Privacy Act of 1978 enacted to 
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employees, and the use of polygraphs Pri- 
vacy issues have also been raised by congres- 
sional committees concerned with the data 
systems run by various agencies, in par- 
ticular the Federal Bureau of Investigation 
(FBI), the Internal Revenue Service (IRS), 
the Social Security Administration (SSA)! 
and the Census Bureau 

Privacy-related issues will remain on the 
congressional agenda over the coming dec- 
ade for a number of reasons. l 
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• new computer and communication tech- 
nologies will create new problems and 
change the nature of old ones; 

• the public s awareness of and sensitiv- 
ity to the privacy problems presented 
by large data systems appear to remain 
high; and 

• the Federal Government has deliber- 
ately chosen to react to privacy issues 
associated with recordkeeping on a 
case-by-case rather than on an omnibus 
basis 



Future Privacy Issues 



An Omnibus v. A Selective Policy 

Omnibus legislation, which would cover 
all data systems both public and private in 
which personal information is maintained, is 
the approach European nations have taken. 
In the United States this approach has been 
rejected by the Privacy Commission and the 
executive branch for several reasons. First, 
there would be serious difficulties in drafting 
such legislation in a way that would achieve 
the desired protection without seriously 
hampering legitimate data processing appli- 
cations. Furthermore, the variety of sys- 
tems, of applications, and of environments, 
ranging from large banks and insurance 
companies to street corner drugstores and 
individual homes, would be hard to accom- 
modate with any single piece of legislation. 

In addition, omnibus legislation could lead 
to the creation of another Federal regulatory 
agency that would exercise oversight over 
the information industry. Again, because of 
the wide variety of applications such an 
agency would find itself involved in most as- 
pects of American life. The Swedish experi- 
ence is often given as an illustration. In that 
much smaller country, a newly created data 
bank licensing board had 20,000 applications 
to process in its first year of operation. 



With the selective approach, however, 
Congress will be considering a long series of 
privacy bills. A substantial legislative effort 
will be required to catch up with current 
computerized recordkeeping practices. An 
immediate concern is the development of 
privacy rules for computer applications in 
banking, medicine, social and medical 
research, credit, insurance, and criminal 
justice. Privacy is also likely to be a major 
issue in the development of electronic mail. 

Furthermore, new applications for com- 
puters and communications, such as an auto- 
mated securities exchange, in-home informa- 
tion services, electronic publishing, and the 
automated office, may create new environ- 
ments for privacy policy issues to arise. As 
Government agencies such as the Depart- 
ment of Justice, IRS, or SSA begin to use 
the new generation of information tech- 
nology for their recordkeeping activities, pri- 
vacy problems that were not specifically ad- 
dressed in previous legislation may havp to 
be dealt with by Congress. Recently, for ex- 
ample, the availability of low-cost data com- 
munication technology has raised the mes- 
sage-switching issue to prominence in the 
congressional debate over the future of the 
operations of the FBI's National Crime 
Information Center Computerized Criminal 
History system. 
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Unlike the executive branch, which can 
subject all proposed privacy legislation to a 
consistent agency review, Congress con- 
siders the different bills in a variety of 
committees depending on the applications 
and users under consideration. Therefore, 
careful coordination and the adoption of 
principles for guiding the nature of Federal 
policy concerned with the handling of per- 
sonal information in automated information 
systems is needed in order to prevent the 
enactment of a patchwork of contradictory 
privacy legislation. 

This approach leads to legislation tailored 
to the needs of the specific sector affected by 
it. However, there are also hazards. A dan- 
ger inherent in disorganized privacy legisla- 
tion is that businesses that operate in areas 
of overlapping authority would face a 
variety of regulations, some even contra- 
dictory, governing their data systems. 
Others might be able to find loopholes by op- 
erating in the gray areas between regulated 
sectors, thereby seriously abusing the intent 
of Congress. 

Because the selective approach differs so 
radically from the approach taken by most 
other developed nations, problems could 
arise internationally. Many developed na- 
tions, for example those in the Organization 
for Economic Cooperation and Development, 
are attempting to coordinate their privacy 
legislation so that differences in their rules 
and practices will not hamper the exchange 
of information across their horders (see ch. 
12). The rejection of an omnibus approach, 
coupled with the lack of a centralized author- 
ity over data banks, 4 . making it difficult for 
the United States to enter into these interna- 
tional agreements. Such a divergence could 
leave the United States as "odd man out" 
with respect to transborder data flow. This 
could have serious implications for trade and 
international relations and warrants serious 
attention. 1 
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Collection of Data 

In an attempt to decrease the amount of 
data collected by Government agencies, Con- 
gress specified in the Privacy Act of 1974 
that data collected must be "relevant" to the 
purposes of the collection. The Privacy Pro- 
tection Study Commission reported finding 
a slight decrease in data collection following 
this legislation. 

However, the relevancy test is undeniably 
weak and difficult to enforce, and the small 
decrease found in data collection was a one- 
time phenomenon. Recordkeeping is increas- 
ing, both in the Government and in the pri- 
vate sector. Furthermore, as more and more 
transactions in the private sector become au- 
tomated, data that would normally not have 
been collected or retained will now be en- 
tered into computer systems and stored, 
thus becoming available to data collectors. 

The recent dispute between Prudential In- 
surance and the Department of Labor (DOL) 
over access to personnel tapes is illustra- 
tive. 4 To investigate possible discrimination 
in hiring, DOL has requested complete per- 
sonnel records held by Ptudential. Without 
judging the merits of the case, it can still be 
observed that, were the files in question not 
integrated on magnetic tapes, DOL would 
have been unlikely to make such a sweeping 
request because of the burdensome task of 
analyzing manual records. It should also be 
noted that computer technology allows such 
files to be easily processed to create new 
tapes containing only the information DOL 
and Prudential would mutually agree is per- 
tinent. 

Relevancy is also a weak requirement with 
respect to its application to the timeliness of 
data. The Privacy Commission found that 
agencies were not particularly inclined to 
cull their files. As the cost of memory con- 
tinues to drop and very large data systems 
become easier to operate, even existing 
economic and managerial incentives to clear 
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data bases ot old and useless information 
disappear 

A fundamental assumption underh mg 
much ot the privatv debate m the 1970's was 
that collecting personal information is -m 
the nature ot a transaction the individual 
yields personal information m exchange tor 
some benefit Thus, much of the fair practice 
doctrine centers on the requirement that the 
recordkeeper abide In obligations implicit in 
that transaction However, individuals will 
increasingly be encountering computerized 
systems that collect and store information 
about them without their knowledge or con* 
sent. Very tew laws exist pertaining to the 
ownership or disposition ot such informa- 
tion. e\en when its use* mav be contrary to 
the individual's perception ot his or her best 
interests 

The mailing list sv stems were among the 
involuntarv systems studied in depth b\ the 
Privacy Commission Persons have no idea 
whether or flow information about them- 
selves is being compiled Since, at the time of 
the study, the Commission deemed mail so- 
licitation to be a socially benign activity, 
they did not consider this type ot record- 
keeping to be ot serious crneern 

However, pressures from users of such 
systems tor greater selectivity in their 
mailing lists has led to collection of more 
personal data on individuals. Political solic- 
itation lists, for example, may contain in- 
formation about a person's organizational 
affiliations, religious beliefs, charitable 
contributions, income, and history of sup- 
port for various causes. This type ot infor- 
mation can he used to predict the likelihood 
that a person would support a particular 
candidate or political cause and is, therefore, 
useful in compiling a targeted mailing list. 

Such personal information, which is often 
collected without the consent of the subject 
through the exchange or purchase of mailing 
lists or access to other open sources of infor- 
mation, assumes the character of a political 
dossier It is not clear that existing controls, 
either over the us* of such data systems for 



purposes be\ond computing mailing lists or 
over the original collection of the informa- 
tion, are adequate to deal with the increasing 
capability modern technology offers to col- 
lect data and compile such lists. 

Modern computer technology through the 
1980's will facilitate the collection ot per- 
sonal data, as well as make possible its in- 
stantaneous nationwide distribution. Point- 
of-sale systems are an example of this trend, 
A sale made at <i store and recorded through 
a terminal will collect a variety ot informa- 
tion about a customer, such as what was pur- 
chased, the exact time and location of the 
transaction, and possibly the customer's fi- 
nancial status. This will not only be Recorded 
at the bank, and thus fall under banlcfurivacy 
rules, but may also be retained by the store 
management for its own use, or perhaps even 
sold to third parties 

Access 

The controls in current privacy legislation 
that concern access to Government-held 
data by other agencies depend on a "use" 
rule. That is, with some exceptions, data 
may not be given to a third party for any 
purpose other than one "compatible" with 
that for which such data were originally col- 
lected. Such routine uses must be made 
known to the data subject either at the time 
the data is solicited from him or construc- 
tively through publication in the Federal 
Register. 

The Privacy Protection Study Commis- 
sion found this rule to be relatively ineffec- 
tive. The word "compatible" is vague and 
subject to a variety of agency interpreta- 
tions. In addition, there are a host of excep- 
tions, both within the Privacy Act and in 
other laws, governing the ways in which 
agencies exchange information. The provi- 
sion ot notice was found to be equally ineffec- 
tive. Finally, privacy rules conflict with 
freedom of information Faws. For example, 
Iowa's attorney general recently ruled that 
the State \ open records laws superseded 
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any rights to user privacy with respect to 
library records. ' 

The proliteration ot personal data collec- 
tion without, either the subject's permission 
or knowledge implies that even if such a use 
provision were extended to the private sec- 
tor and its ambiguities clarified, its effec- 
tiveness would be limited. The rule assumes 
a voluntary relationship between the pri- 
mary data collector and the subject, and a 
willing yielding of personal information. 
Where such an agreement does not exist, the 
subject of the data is not the "owner" of the 
information. 

The data collector argues, usually cor- 
rectly, that the information being collected is 
already in the public domain. The issue may 
boil down to the difficult question of whether 
a compilation of information in the public do- 
main along with statistical inferences drawn 
from it ca" become so comprehensive as to 
constitute an intolerable invasion of an indi- 
vidual's privacy. Some States are already 
considering bills to restrict the access to 
public records, in particular to auto licensing 
data. 

OTA's study of the FBI's National Crime 
Information Center Computerized Criminal 
History (NCIC CCH) record system docu- 
ments the difficulty in enforcing access rules 
for very large distributed information sys- 
tems that serve many users and contain in- 
formation of value to a variety of people. 
Even i? tight security measures could solve 
the difficult problem of stopping access by 
unauthorised persons, no controls within the 
system can keep the data, once extracted by 
an authorized user, from being used im- 
properly. 

i'urthermore, the overlap of authority (in 
the case of NCIC, between Federal, State, 
and local agencies), along with the cdncomi- 
tant overlapping assortment of rules and 
procedures, means that it is very difficult to 
establish a single consistent policy for ac- 
cessing and using data. 
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This problem is duplicated in the private 
sector. Retailers ot personal data, such as 
credit bureaus or mailing list operators, have 
no control over how the information they sell 
is used. Large corporate information sys- 
tems, where many employees or even sutside 
users have access to the data, will have 
similar problems of control. 

The question is not just the adequacy of 
the security of the internal system against 
unauthorized use, but who is authorized ac- 
cess to the data and how they use it. Many 
new information systems are characterized 
by their wide distribution and easy accessi- 
bility over communication lines. In fact, 
they are designed for just these characteris- 
tics. In such complex environments, with 
multiple data bases in the system and multi- 
ple users accessing it from anywhere in the 
Nation, procedural control of data use could 
be almost impossible. 

A final access problem, suggested above, 
•is the impact on privacy of the computeriza- 
tion of traditionally public Government files. 
Lists of property transfers, licenses, births, 
deaths, and so on have always been open, 
but difficult to get at and use. Certainly, 
they have not been easily absorbed into pri- 
vately held data bases. Computerized files 
have changed that access capability, and as 
a market for such information develops the 
interest in using it will likely increase. 

Microprocessors and Surveillance 

The potential now exists for the develop- 
ment and marketing of a wide variety of de- 
vices either specifically designed or capable 
of being used for the surveillance of in- 
dividuals without their consent. Micro- 
processor technology is progressing to the 
point where it will be common for computer 
logic and data storage capability to be built 
into inexpensive consumer goods of all 
kinds. Pocket-size, voice-stress "lie detec- 
tors" are already being marketed, although 
their reliability is unproven. Within a few 
years, wrislwatch-size units will be Avail- 
able. Although at least one State, Penn- 
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sylvania, has a law requiring subject consent 
for use of such devices, its enforcement 
would be quite difficult when the possession 
and use of a unit can be so easily hidden. 

Currently available security systems 
based on magnetic cards and microproces- 
sor-based locks allow an employer or build- 
ing manager to keep detailed records of the 
whereabouts of anyone in the building. De- 
vices called "pen registers" provide a similar 
capability for monitoring telephone traffic. 
If voice recognition and picture processing 
capabilities improve as much as some ex- 
perts expect over the next decade, other 
forms of inexpensive automated surveillance 
will also become available. 

Abuse of this technology for illicit pur- 
poses may become a serious problem. How- 
ever, seemingly legitimate applications such 
as retail market surveillance of customers or 
employer surveillance of employees may also 
cause concern if there are obvious abuses. 
Arguments for socially sanctioned uses will 
raise, in new forms, classic issues of civil 
rights v. both law enforcement ard the 
rights of employers to monitor their employ- 
ees. In this debate, the new information tech- 
nology places powerful new tools in the 
hands of those who argue for greater social 
control. 

The Glass House Society 

The issues that are likely to remain active 
during the next decade or two arise from the 
public's misgivings that the use of large data 
systems containing personal information is 
threatening to them Recent polls have 
shown a steadily rising concern over privacy. 



which is directed equalh at Government and 
private data systems f 

- Some social and political scientists sug- 
gest that the computer represents to the 
public the growing power of Government 
and other large organizations over their 
daily lives. Thus, as the use of these in- 
formation systems grows, the public's ap- 
prehension is also expected to grow as will 
pressures on public officials to control or 
even to stop certain types of computer 
applications. 

There appears to be a trend toward a 
society in which information about a per- 
son's finances, medical and educational his- 
tories, habits as a consumer, daily move- 
ments, and communications with others 
through the telephone or the mail will be col- 
lected, stored in a computer, possibly sold to 
others, and used in ways over which the in- 
dividual "may have little or no control. There 
may be many benefits in terms of the pro- 
ductivity and efficiency of institutions, and 
in terms of broadened awareness and choices 
available to individuals as citizens and con- 
sumers. But the long-term social and po- 
litical effects of this trend— beneficial and 
adverse— are still largely unknown. It seems 
likely, however, that they will be profound, 
and will alter how individuals both perceive 
and relate to the institutions that affect their 
lives. Consequently, Congress will continue 
to be a principal forum in which these con- 
licts will be deliberated and ultimately 
resolved, 
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Concern and Need 



The security of computer systems, par- 
ticularly those operated by the Federal 
Government, has increasingly concerned 
Congress. Hearings have been held, studies 
have been published by the General Ac- 
counting Office, and legislation has been in- 
troduced, 1 all addressing the problem of 
meeting threats to Federal data installa- 
tions. 

Security concerns have also appeared in 
congressional reaction to proposals for new 
advanced information systems by Federal 
agencies, such as the proposed Social Securi- 
ty system, the Tax Accounting System of 
the Internal Revenue Service, and the up- 
grading of the National Crime Information 
Center (N'CIC) system of the Federal Bureau 
of Investigation. All of these proposals have 
been scrutinized carefully by congressional 
committees, with particular emphasis on the 
security of the systems. 

Similar concerns have also been expressed 
by the executive branch. Presidential Direc- 
tive 24. published in February 1979, estab- 
lished policy for the security of Federal com- 
munications and assigned responsibility for 
the protection of nonmilitary but sensitive 
Government communications. This directive 
was motivated by a concern for national se- 
curity, that is, the potential value of in- 
tercepted communications to an enemy. 

In a 1978 memorandum,- the Office of 
Management and Budget d^ected all Fed- 
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eral agencies to pay attention to the security 
of their data processing operations. The 
memorandum required the agencies to con- 
duct risk analyses of the threats and vulner- 
abilities of their systems and to develop ap- 
propriate security plans. 

The National Bureau of Standards, under 
authorization by the Brooks Act/ is continu- 
ing to develop guidelines and standards in all 
areas of computer security for use by Fed- 
eral agencies. The first standard to emerge 
from this effort is the Data Encryption* 
Standard for protecting data communica- 
tions. Its adoption may present difficulties 
because of the rapidly changing technology 
and the extraordinarily wide range of types 
and uses of Federal information systems 
that would have to be covered. 

In the domestic sector, the security prob- 
lem is growing in importance due to several 
trends. 

• The iapidly increasing quantity of com- 
puterized data stored and transmitted 
over communication networks. 

• The increasing value of the data, both 
as a marketable commodity and as rep- 
resentative of value, for example, as in 
an electronic funds transfer or an auto- 
mated stock exchange transaction. 

• As has been pointed out, an increasing 
quantity of personal information is be- 
ing collected, stored, and transmitted. 
The security needs of electronic mail or 
of the NCIC system are motivated, in 
part, by privacy concerns. 
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• An organization's operations are be- 
coming more dependent on the reliable, 
secure functioning of the supporting 
computer system. A computer failure 



can close down all sales registers in a de- 
partment store, the air traffic control 
:;'«t"m, or all the teller stations in a 
bank. 



The Technology of Security 



There is a blend of optimism and pessi- 
mism in the computer technology commu- 
nity about the future of computer security 
problems. On the one side, experts correctly 
point out that the technology of securing 
computer systems is improving steadily (see 
ch. 13). They also maintain that computer- 
ized systems, even if not perfectly secure, 
are often far more secure than the manual 
systems they replaced. 

On the other side two main arguments are 
advanced. First, since security has not been 
historically a high-priority goal in the design 
of information systems, the existence of 
security technology does not necessarily 
guarantee its proper application. Security 
hardware and software are often added as an 



afterthought rather than integrated into the 
system from the beginning. Most designers 
have not been trained to build security into 
the systems they assemble, since security 
features can increase the initial cost and 
operating overhead, and may be burdensome 
to manage. 

The second objection is that advances in 
the technology of protection may not be ade- 
quate to deal with the complex systems now 
being built. In particular, the present trend 
towards linking computers into networks 
that use new communication services, which 
vastly increases the overall complexity of 
the resulting systems, presents new and dif- 
ficult challenges to the designer attempting 
to build a secure system. 



Threats and Targets 



Analysts view the security problem in sev- 
eral parts. Threats are the possible actions of 
outside forces that may compromise a 
system. Targets are those points within the 
system against which an attack may be 
mounted. Assets are the resources of the 
system (information, money, goods) that 
may be lost. 

Because of the trends cited, threats 
against computer systems appear to be on 
the increase. The transfer of funds elec- 
tronically is only one case in which the in- 
formation processed is assuming a signifi- 
cant tangible value. Electronic mail and fu- 
ture systems for trading commodities and 
securities will also tempt criminals. As the 
society grows more information oriented, the 
risk of theft will increase along with the 
potential payoff for its success In response. 



a number of computer scientists have focus- 
ed their attention on computer security. 4 ' 

Computer crime analysts note a number of 
types of threats: 



theft; 
sabotage: 

data alteration (i.e., in a credit file); 

blackmail; 

extortion; 

corporate espionage, 
system failure, 
service interruption; 
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• natural hazards (e.g., volcanic eruption, 
flood); and 

• unauthorized disclosure. 

Computer literacy is growing and with it a 
proportionate number of people sufficiently 
knowledgeable to compromise a computer 
system. In addition, access to low-cost per- 
sonal computing systems may provide such 
criminals with more sophisticated tools. At 
least one such attack has already been made 
on the telephone system with the aid of a 
small in-home computer system. Recently, 
newspapers reported the alleged use of a 
small computer by high school students to 
break into the data banks of several Cana- 
dian corporations. 6 

Certain social conditions may increase 
the threats to computer-based systems. A 
period of stagnation coupled with high infla- 
tion could create economic pressures that 
might lead to an increase in white-collar in- 
sider crime. In addition, some social and po- 
litical scientists see the possibility of an in- 
crease in domestic terrorist activity. 7 
Foreigri experience has shown that such ac- 
tivity is often directed against computer and 
communication systems, which the perpe- 
trators assume, often rightly, to be at the 
heart of organizational operations. 

Forewarniiigs such as these, although 
based on expert opinion, are at best specula- 
tive. Nevertheless, security plans must be 
developed against potentialities, not just 
certainties. Thus, the possibility that an in- 
crease in certain social pressures could lead 
to economic and sabotage threats against 
the coming decade's complex information 
systems is a significant factor in any secu- 
rity analysis. 

While threats to information systems and 
the potential losses from attacks are clearly 
increasing, the vulnerability of systems to 
successful attack is changing in character. 
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In some cases it is improving, in others 
worsening. 

The vulnerability of the system software 
to intrusion should decrease as operating 
systems are designed with security as a prin- 
cipal goal. They can be expected to be more 
immune to compromise than those currently 
available. Data communication will be better 
protected, both by its changing basic 
* ?chnology and by the incorporation of cryp- 
tographic protection. The language used to 
query the data base will be designed to more 
easily isolate users from data that they are 
not authorized to use. Thus, in the future vir- 
tually every component of an information 
system will have better security technology 
designed into it. 

New vulnerability problems, however, will 
arise at the level of the overall system. As a 
system becomes larger and more complex, so 
do the managerial and technical problems of 
securing it at a system level. The trend to- 
ward linking a large number of computer 
systems together to be used for diverse ap- 
plications by many persons, scattered geo- 
graphically, poses system desigh and man- 
agement problems that are orders of 
magnitude larger than those faced in the 
design of previous generations of informa- 
tion systems. It will be difficult to assess the 
vulnerability of such complicated systems to 
accidental or deliberate misuse or failure. 
Detecting that an untoward incident has oc- 
curred would be even more difficult in such 
systems because of the high volume of work 
that flows through them and the lack in 
many systems of full transaction logs. 

Although the individual communication 
links may be more secure (say through en- 
cryption), data communication adds its own 
problems when integrated into information 
systems. A network of computers that links 
together individual computer systems over 
telecommunication lines has numerous 
points that need to be protected in an en- 
vironment where failure or penetration at 
any point compromises the entire system. In 
addition, such systems are deliberat?ly de- 
signed to distribute access, to make it easier 
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for users to get at the system, and to decen- 
tralize administrative control ot the data 
processing. Consequently , security manage- 
ment setting up and overseeing adminis- 
trative and personnel controls becomes 
more difficult, both because of the increased 
number of persons with direct access to the 
system and because of the geographical 
dispersion of the organizations involved. 

Problems of overlapping or inadequate au- 
thority can complicate attempts to control a 
system's security This would be the case, 
for example, with a Federal system that 
links with State systems, because different 



nodes in the -Astern would have different 
rules, practices, and assignments for system 
security Yet to be most effective, controls 
over data access, usage, and security must 
be applied uniformly over an entire system 
A private industry information system that 
linked together data processing nodes under 
different authorities would face similar prob- 
lems. 

The problems of controlling access in a 
widely distributed data network are ex- 
emplified by NCTC. (They are discussed in 
detail in OTA's NCTC assessment, in pro- 
gress.) 



Future Security Issues 



Among the severa. difficult issues involv- 
ing computer secuntv that are likely to con- 
front Congress over ihe next decade, the fol- 
lowing appear to be the most significant 

Protection of Federal Systems 

Federal information systems control the 
disbursement of an enormous amount of 
money. The Social Security system itself dis- 
burses over Sl.o billion per week. Other 
Federal systems contain information that 
could be used directly or indirectly to make 
profitable financial decisions, e.g.. informa- 
tion concerning Federal monetary policy, 
commodity markets, energy resource esti- 
mates, and the like Still others contain sen- 
sitive information relating to personal pri- 
vacy or national security. All would be 
highly attractive to theft, manipulation, or 
eavesdropping 

There are many potential victims of secu- 
rity failures. Taxpayers would suffer the los- 
ses from a fraudulent drain on the Federal 
Treasury Other types of attacks, for exam- 
ple on social service systems, could create 
severe hardship for individuals dependent on 
those programs. In an extreme case, the na- 
tional security could be threatened, not only 
by attacks on military and diplomatic com- 
puters but also bv assaults on such major 



domestic activities as the air traffic control 
system or the computer-controlled national 
eb'jtric power distribution grid, whose dis- 
ruption could create significant social tur- 
moil. Electronic mail service or an electronic 
funds transfer network would be similarly 
vulnerable. 

Theft, eavesdropping, and sabotage are 
not the only threats to Federal computer 
systems that Congress will need to consider. 
A more subtle threat is a system's potential 
diversion by the bureaucracy from its in- 
tended use This issue is raised in OTA's 
NCIC assersment Expressing similar con- 
cern in a different area, Congress has im- 
posed criminal sanctions for bureaucratic 
violations of the Privacy Act of 1974." 

The technology currently available is not 
very useful for securing a system against 
this type of bureaucratic abuse, although the 
researchers in the field of electronic data 
processing auditing are looking at related 
problems. Many abuses do not involve viola- 
tions of the computational procedures within 
the computer system, but rather represent 
misuse of the data once it is out of the sys- 
tem Thus, the most effective controls 
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against bureaucratic abuse tor now will like- 
ly be in the areas of policy, personnel, and 
management, rather than technical. Strong 
criminal sanctions tor misusing a system 
may also have a deterrent effect. 

As the Government continues to auto- 
mate, problems of bureaucratic account- 
ability and the responsibility for oversight, 
will confront Congress with the need to bet- 
ter understand and more closely monitor the 
use of large Federal information systems. 

Protection of Vital Domestic 
Information Systems 

There are a number of national interests 
that will cause Congress to become con- 
cerned about the security of major non- 
Federal national information systems. 

Regulations regarding the flow of personal 
information are proliferating in nations 
around the world. To date, most laws con- 
cern the transfer of personal information and 
stem from national privacy laws. However, 
there seems to be a distinct trend toward the 
extension of these laws to organizations, 
which are designated as "legal persons " 4 and 
thus included under privacy laws designed 
to protect personal data There is also a 
growing concern expressed by some nations, 
particularly those in the Third World, that 
information originating within their borders 
is a national resource over which they want 
to maintain control. 10 

These trends may create additional fears 
about the security of networked systems 
that communicate beyond their boundaries. 
The relatively mild wording about security 
in current privacy legislation could reappear 
in much more stringent form in new legisla- 
tion 
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There is also a Federal responsibility for 
certain intormation systems that although 
privately operated, are fundamental to social 
well-being. The security and reliability of au- 
tomated systems for nationwide bank check 
clearing, for a national stock exchange, and 
for computer-based commodity trading, for 
example, would all be under the purview of 
Congress. The vulnerability of such systems 
is of governmental concern because of the 
harm that a major system failure could cause 
to the Nation's economy and to its citizens. 

The continuing evaluation of the privacy 
issue will undoubtedly lead to more strin- 
gent security provisions consistent with the 
evolution toward more communication- 
based computer systems. 

If there is in fact a growing commercial 
market in personal data, an illicit traffic in 
stolen information could develop, thus in- 
creasing the threat of piracy of personal data 
from these systems. This would call for 
tougher and more specific standards for 
their security. 

The Federal Government, due to its tradi- 
tional concern for the protection of military 
and diplomatic communications, has a high 
degree of expertise in the field of data secu- 
rity. A good deal of this expertise is either 
classified or in the hands of highly sensitive 
organizations such as the National Security 
Agency. The appropriate role of the Federal 
Government has not been defined in trans- 
ferring this knowledge, for supporting com- 
puter security in both the public and private 
sectors, for setting standards, and for certi- 
fying security technology. 

The lack of such policy definiti #n is visible 
in the current debate over Government con- 
trol of cryptographic technology." In this 
debate, the needa^f the private sector for in- 
creased communication security, and hence 
for the existence o< a civilian commercial 
cryptographic capability, are set against the 
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perceptions of the defense community that 
such development thftatens national secu- 
rity concerns by putting sensitive informa- 
tion in the public domain. 1 ' A related issue is 
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the desire in the academic community for the 
freedom to conduct research on the mathe- 
matics underlying cryptography 
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Chapter 9 

Government Management of Data 
Processing 

Government Use of Information Technology 



In the early days of computing, the Fed- 
eral Government as a user was a principal 
stimulus to the development of the field. 
Agencies such as the Census Bureau, the 
Bureau of Standards, the Atomic Energy 
Commission, and the Department of Defense 
supported the design, programing, and uses 
of the most sophisticated computer systems 
in the world. In many cases, development 
work funded by the Government was carried 
out in university and industrial laboratories. 

A few instances of Federal expertise at the 
leading*edge of computer applications re- 
main, for example in the scientific research 
field. However, it appears that, in general, 
the Federal Government is rapidly falling 
benind the private sector in its use and man- 
agement of up-to-date computing tech- 
nology. If this observation is correct such a 
lag would penalize Government operations 
in two ways. 

1. potentially lost opportunities to use the 
newest technology to improve the effi- 
ciency and effectiveness of Government 
programs, and 

2. increased cost and decreased rehahditv 
resulting from operating systems that 
are becoming obsolete, from archaic 
management procedures, and from bur- 
densome procurement restrictions- 



Cheaper computing hardware, the emer- 
gence of data communication-based sys- 
tems, and new software techniques are 
changing the way computers are used in in- 
dustry. The next 10 years will see significant 
movement in the private sector toward auto- 
mating the flow of information in offices, 
toward experimenting with new manage- 
ment structures based on high-volume data 
communication, and toward automating 
decision support systems for use by higher 
management. To the extent that these ap- 
plications fulfill their promise of improve- 
ment in both the quality and productivity 
of management, the Federal Government 
would be remiss in not making use of them 
where appropriated "~ 

Government, to a great extent, resembles 
the service and information sectors of the 
economy with respect to the role of informa- 
tion technology in making productivity im- 
provements. Any significant productivity 
improvements brought about by this tech- 
nology would have to be examined in the 
light of their possible effects on: 

• employment, particularly at the clerical 
and lower management levels; and 

• requirements for training to upgrade or 
reorient the skills of employees forced 
to use information technology or dis- 
placed by its adoption. 



Problems 



A host of new demands for Government 
recordkeeping requirements may arise, rang- 
ing from draft registration to the possible ex- 
pansion of Federal health-care benefits, in- 
creased demands are being made on existing 



systems, such as that of the Social Security 
Administration, due to population growth, 
the increased complexity of the programs 
that must be administered, and the demand 
for higher productivity by the bureaucracy. 
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New information technology will help to pro- 
vide the tools to meet these neer?~\ 

There are indications suggesting that the 
Government is now experiencing severe dif- 
ficulties managing the computer technology 
it currently has in place The General Ac- 
counting Office ((J AO) reports, congres- 
sional hearings, the report from the recent 
Presidential reorganization project, personal 
testimony from Federal electronic data proc- 
essing administrators, and OTA's assess- 
ment of the National Crime Information 
Center (NCIC) run by the Federal Bureau of 
Investigation (FBI), all indicate that, for a 
variety of reasons, the Federal Government 
does not seem to be managing its computing 
resources effectively. 

A sampling of over 200 GAO reports on 
electronic data processing (KDP) that have 
been published over the iast few years show 
the following titles: 

• Federal Productivity Suffers Because 
Word Processing Is Xot Well Managed* 
April 1979. 

• Problems Found With Cut ernrnent Ac- 
quisition and Use o r ( \>mputers From 
Movent ber /*%V> /«/ I December 1977, 
March 1977. 

• Contracting for Computer Software De- 
velopment -Serious Problems Require 
Management Attention To Avoid 
Wasting Additional Millions, Novem- 
ber 1979. 

• Inadequacies in Data Processing Plan- 
ning in the Department of Commerce, 
May 1978. 

• IRS f aw Better Plan For and Control 
Its ADP Resources, June 1979. 

The Federal data processing project of the 
President's reorganization project reported 
in April 1979 that, while there was a clear 
need ior using advanced information tech- 
nology, the Government was seriously mis- 
managing its existing data processing. The 
OTA assessment of the FBI's NCIC system 
shows that it has been obsolete for several 
years and is growing more costly and un- 
reliable to operate. (A recently approved 



upgrade is now being implemented.) Other 
studies have shown that the ratio of person- 
nel to hardware costs at Federal installations 
i nearly twice that of private industry. 

Among the reasons proposed for these 
problems are. 

• Bureaucratic red tape. Computer tech- 
nology is changing rapidlv; however, 
the rules governing the procurement 
and management of automated data 
systems are proliferating. Unless they 
are written with technological farsight- 
edness, they can restrict the mod- 
ernization of an installation's opera- 
tions. The numbers shown in table 7, 
which have been taken from a 1977 re- 
port of the Office of Management and 
Budget (OMR),' illustrate the welter of 
rules under which the Federal comput- 
ing centers operate. 

• (Organizational inflexibility. Recent re- 
search has shown that modern '^forma- 
tion systems profoundly affect „ne deci- 

OHiu* of Management and Budget, federal Data /'rmvss- 
inii /W/m«'s iinti Regulation Annotated Bibliography 
I)ecemher m?x 



Table / —Policies and Regulations Concerning 
Federal Data Processing 

• 4 laws 

• 3 Executive orders 

• 3 Presidential memoranda 

• 10 Office of Management and Budget circulars 

• 12 Office of Telecommunication Policy circulars 

• 3 Federal management circulars 

• 3 Federal procurement regulations 

• 3 Federal Property Management Regulations (FPMR sj 

• 16 FPMR bulletins 

• 2 FPMR temporary regulations 

• 6 National Communication System Guidance 
Publications 

• 60 Federal Information Processing Standards 
Publications (FIPS Pubs) 

• 1 1 Federal Telecommunications Standards isonip 
overlap with FIPS Pubs) 

• 11 Policy letters and memoranda 

• 2 Department of Justin Office of L< j gal Counsel 
Opinions 

• 3 Federal Communications Commission de< isions 

• 5 General Services Administration Management 
Guidant e Dor uments 
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sionmaking patterns in organizations. 2 
The research suggests that computer- 
ized information systems are particu- 
larly effective under special conditions; 
these depend on the operational level 
and support for the system. At higher 
levels of organizations, information 
systems are more subject to the politics 
and conflicts of organizational life. 
While at times these systems prove to 
be effective, at other times they will be 
unworkable because existing powerful 
groups will not cooperate in systems 
development and use. Experience in the 
private sector likewise suggests that a - 
tempts to force major new information 
systems into rigidly traditional and un- 
receptive management structures are 
often doomed to failure. 3 Yet, reorganiz- 
ing a bureaucracy is a difficult and 
highly political process. 

• Procurement delays: Federal EDP 
managers complain that the procure- 
ment process is so complex, confusir^, 
and fraught with delay that by the time 
a new systems concept is actually 
realized in the installation of new hard- 
ware, the system is already approach- 
ing obsolescence. Estimates of delays in 
the procurement process for some large 
systems run as long as 6 years, long 
enough for the desired technology to 
become obsolete. Estimates do not in- 
clude the further delays imposed by dis- 
cussions within the executive branch or 
Congress of the appropriateness of the 
systems or of their possible social im- 
pacts. 

• Staffing problems: There has been some 
concern expressed that Government 
computer expertise itself has been 
growing obsolete. In particular, the 
Government has trouble competing 
with private industry for highly tal- 



'R Khng and W Scacchi, "Computing as Social Action, 
the Social Dynamics of Computing in Complex Organiza- 
tions," Advance** in Computers, vol 19 (New York 
Academic Press, 19H0) 

'Henry C Lucas. Whx Information Systems Fail (New 
York Columbia University Press. 1975) 



ented, and correspondingly expensive, 
programing and systems analysis 
talent. 

Furthermore, although job-hopping 
and staff turnover have been chronic 
problems for private industry, this rota- 
tion also seems to produce a cadre of 
very broadly experienced, expert, and 
up-to-date programers in the labor pool. 
Not only do these people learn faster, 
but as they change jobs they bring new 
ideas and techniques into each data 
processing center. Government pro- 
graming staff seems to be more static, 
moving less between agencies and 
almost never between private industry 
and the Government. 

In addition, a principal drawing card 
for talented programers is the op- 
portunity to work on state-of-the-art 
systems. The job of maintaining a 
decade-old operating system on an out- 
of-date computer, even if very highly 
paid, is unlikely to attract an experi- 
enced and talented programer. Thus, 
the obsolescence of Federal systems 
sets up a vicious circle— a disincentive 
to the kind of people who could best 
develop new systems. 
• Debates over social impacts: The instal- 
lation of several large, new data proc- 
essing systems has been delayed or, in 
some cases, completely halted in the 
face of congressional concerns about im- 
pacts these systems might have on con- 
stitutional rights and other societal 
values such as privacy. Plans proposed 
for integrated Federal data banks have 
also occasioned public debate. Thus, it 
is reasonable to assume that there will 
be a great deal of social sensitivity and 
distrust or at least wariness about ma- 
jor new data systems. This concern will 
affect particularly those applications 
that are designed to handle personal 
data. 

It may be that a more clearly articulated 
set of social policy concerns with more con- 
crete guidelines will aid Federal agencies to 
better anticipate the questions of societal 
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impacts before they arise. Furthermore, sys- these broader policy concerns, which can run 
tern managers and designers working in counter to more narrow engineering design 
these agencies need to be more sensitive to goals such as efficiency and reliability. 



Issues 



There seems to be no doubt that several 
major new data processing systems will be 
needed by Federal agencies within this dec- 
ade. Congress will, therefore, be faced with a 
number of problems involving planning, 
designing, procuring, and managing these 
systems. 

Some legislative attempts to rationalize 
Federal EDP have been made. The most no- 
table is the 1967 amendment, which is 
known as the 4t Brooks Act," to the Federal 
Property and Administrative Services Act. 
This act set up authorities in the executive 
branch to regulate agency procurement of 
data processing equipment. The most recent 
significant bill was H.R. 6410/S. 1411 passed 
by Congress and signed into law December 
M, 1980. This public law, known as the 
Paperwork Reduction Act of 1980, estab- 
lishes central oversight in OMB of the in- 
formation policies and practices of the ex- 
ecutive branch. Perhaps most important, 
this act emphasizes the basic need for re- 
structuring the way information resources 
and supporting technologies are managed in 
the Government. This represents a new ap- 
proach by giving management of informa- 
tion resources similar importance to that tra- 
ditionally assigned to managing financial 
and personnel resources. Many issues and 
questions need attention from this broader 
perspective. For example: 

• There is a need to better understand the 
effects of large-scale information sys- 
tems on the internal organization and 
management of Government agencies 
and on decisionmaking in Federal agen- 
cies, 4 



4 K Ldudnn. Pmacv and Frd.-ral hata Ranks, Sum.". 
Januar\ l-*eoruar\ 1 9*0 pp ~,n 



Congress and the public need to know 
more about location of responsibility, 
the quality of the decisions, the nature 
of due process for clients affected by 
those decisions, and the accountability 
of the bureaucracy to Congress and to 
higher-level policymakers in the ex- 
ecutive branch. A better understanding 
of the broader and longer term social 
impacts of a massive automated bu- 
reaucracy is also needed. 

Many questions are still unanswered. 
Can there be both increased efficiency 
and fairness in Federal data processing? 
Are there inherent threats to the civil 
liberties of the clients of agencies that 
automate their decisionmaking? Will 
there be more subtle effects on social 
values and on the political attitudes of 
citizens toward Government? 

Some research on these topics, par- 
ticularly on managerial effects, has 
been done in the context of private sec- 
tor organizations. A few investigators 
have also started to look at local 
government impacts. s 

Some of these results may be directly 
applicable to Federal agencies; other 
findings can only be suggestive. For ex- 
ample, research suggests that some 
local agencies may use their informa- 
tion systems for political purposes 
rather than to improve administrative 
efficiency/' Single, centralized policy- 
oriented information systems may not 

UiHwm button aod Kenneth Kracmcr, "Management 
t'tili/ation of Computers m American Local Governments ' 
( t mi mu men turns nf the Assnttat'nn of Cumptttini? 
Mmhitwrw vol 2, No 1, March I97M, pp .J0.V309 

'Rob Kling. ' Automated Welfare CI lent -Tracking and 
SiT\ne Integration The Political Kconomv of Computing, 
( urnmiinu atmns of t/w Awtmattnn nf ( ornputin^ 
(ftint-rv \o| 21, \n fi, .June l 4 »7H, pp iKf-t&i 
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necessarily be more objective than their 
manual counterparts (containing less 
data); much may be gained by having 
competing systems. 7 While these and 
other studies of private sector and local 
government information systems may 
net shed much light on Federal informa- 
tion systems, this existing body of em- 
pirical studies does provide a useful 
starting place. 8 9 10 Careful sim !ar 
studies of Federal systems should be 
undertaken, since these systems are 
often large in scale, accountable to a 
wider variety of interests, and managed 
under somewhat different vendor and 
civil service arrangements. 

Little actual research has been done 
on these broader policy issues, although 
there is an indication of some activity 
among analysts working in this field. 
One possibility would be for some ap- 
propriate agency to be encouraged by 
Congress to support research in the im- 
portant areas of social impact. Such a 
program could fund long-term investi- 
gations that look beyond the short- 
range focus of most current policy 
analysis. 11 

• The process by which appropriate social 
values and goals are reflected in system 
design needs clarification. Major new 
systems will need to be evaluated by 
Congress for their effects on privacy, 
security, constitutional rights, and 
many other issues that are not normally 
the concern of the designer or operator 
of an information system. 



Rob KImg. Information S\ stems in Public Po!k> Mak- 
ing Computer Technologx and Organizational Arrange- 
ments Trlrcttmmunu dtums I'nlnx vol 2, No 1, March 
1978. pp 22-32 
"Dutton, and Kraemer, op nt 

'Rob Khng, "Social Analvses of Computing Theoretical 
Perspectives in Recent Kmpirical Research, ('omputint* 
Sun f\s. vol 12. No I. March WO, pp fil 1 10 
Khng and Scare hi, op cit pp 250 327 

'See, for example, H R 132ft. 9fith Cong . to establish a 
commission on the implications of information technologx in 
education Also see M R H'Mft introduced In Rep George 
Hnmn in the 98th Cong , 2d sess This hill would establish an 
Institute for Information Poht> and Research to address na 
honul information polu \ issues 



Four fundamental approaches are avail- 
able to deal with social value questions: 

1. Congress could assess the potential so- 
cial impacts of each new system design 
that is proposed on a case-by-case basis. 

There are several dangers inherent in 
such an approach. Inconsistent policies 
may be set for different systems and 
different agencies (or even for different 
versions of the same systems at dif- 
ferent times); the evaluation process 
can seriously delay procurements; and 
because the system designer is not 
aware of which issues will be deemed 
important and which requirements are 
likely to be placed on the system, the 
design is nearly always subject to the 
criticism that it is seriously deficient. 

2. Congress could codify a social impact 
policy concerning all Federal informa- 
tion processing systems. An appropri- 
ate executive branch agency could be 
designated as responsible for seeing 
that all new system designs are eval- 
uated in relation to that policy. 

The drawbacks would be the diffi- 
culty of developing such a policy in the 
first place, and the loss of the ability to 
evaluate each new system in light of its 
own peculiar characteristics and the 
specific mission of the operating 
agency. 

3. Congress could continue to examine 
agency proposals system-by-system, 
but would base its evaluation on a social 
impact framework encompassing a set 
of principles for the design and opera- 
tion of Federal information systems. 
This process has already been started 
by the Privacy Act of 1974, which ex- 
pressed congressional concern about 
one specific aspect of Federal agency 
recordkeeping practices, the effect on 
the privacy rights of individual citizens. 

4. Proposals for simplifying the pro- 
cedures for purchasing data processing 
equipment will probably be introduced 
in Congress during this decade. It will 
be necessary for Congress to balance 
the* need to speed up design and pro- 
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curement of Federal systems, against 
the paramount requirements that tax 
money be spent as effecti\cly and as 
equitably as possible and the necessity 
to consider carefully the societal im- 
pacts of these systems. 

Some opponents ot large information sys- 
tems welcome delays as useful impediments 



to the installation of new information sys- 
tems that could turn out to be unnecessary 
or even harmful. However, if after careful 
consideration Congress approves a partic- 
ular information system, bureaucratic delay 
could be viewed as disadvantageous, under- 
mining the potential utility and performance 
of the system and the effectiveness of the 
relevant agency. 
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Society's Dependence on 
Information Systems 



Introduction 



The nature of risk is being changed by 
much of the new high technology on which 
modern society depends— jumbo commercial 
airlines, nuclear powerplants, oil super- 
tankers, or large computer-based informa- 
tion systems. In general, because new tech- 
nologies can be designed to operate more 
reliably than the ones replaced, the risk that 
any particular mechanism may fail has been 
reduced. However, should an accidental or 
deliberate disruption occur, its cost can be 
much larger, even catastrophic. Further- 
more, when society becomes highly depend- 
ent on the reliable functioning of single inte- 
grated technological systems or small collec- 
tions of such systems, the possibility of a 
"domino-like" collapse of several of the indi- 
vidual connected units could also be dis- 
astrous. The failure of the Northeast power 
grid in 1965, which blacked out much of that 
section of the United States including all of 
New York City, is an example. 1 

Integrated systems are often created by 
information technology. There has been a 
strong historical trend toward connecting 
components over communication lines to 
form complex distributed systems, while at 
the same time computers have become 
smaller and more disper&ed. In OTA's ex- 
amination of future technology (see ch. 13), it 
was concluded that this trend toward in- 
tegration would continue, driven by the ef- 
fort to make information systems more con- 
venient and more efficient. 



'Rob Khng. "Value Conflicts and Social Choice in Klectron- 
ic Funds Transfer Systems Developments,' Communications 
of the Awn lotion for Computing Machinery, vol 21 No 8, 
August 197*, pp 642 65? 



When examining technologies such as 
electronic funds transfer (EFT) systems, 
widely ' available electronic mail service 
(EiMS), rnd other large extensively used in- 
formation systems, the following should be 
taken into consideration. 

• The ways in which public policy can 
help to allocate and balance the risks 
society may encounter from national in- 
formation systems against the benefits 
it may receive, under conditions where 
faihlre rates appear to be relatively low 
but potential losses may be high should 
a failure occur. 

• The ability of society to retain the op- 
tion to end its dependence on a particu- 
lar information system if it has unan- 
ticipated undesirable effects; in other 
words, to avoid the possibility of be- 
coming "locked in" to the use of certain 
information systems once they are in- 
stalled. 

• The capability of providing alternatives 
to persons or institutions choosing not 
to accept perceived risks in a new in- 
formation system. 

• The ways in which technology can be 
utilized to reduce the risks, for example 
by introducing additional system re- 
dundancy (alternative paths between 
points in the system, distributed data 
bases, backup computers). The risks in* 
herent in U.S. dependence on a nation- 
wide, interconnected telephone system 
(which itself is rapidly being computer- 
ized) are mitigated to a degree by the 
large number of switching centers and 
parallel trunklines. 
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Failure 



Large complex information systems con- 
tain millions of logical connections and are 
controlled by programs that themselves can 
be composed of millions of instructions. Con- 
sequently, it is difficult to calculate their 
reliability and to predict the failure rate of 
any particular part of the system, as well as 
the effect of a failure on the operation of the 
entire system. A further complication is that 
when a major failure does occur, it is oftr 
caused by a rare combination of multiple 
breakdowns of components. It is currently 
not possible to incorporate all of these prob- 
abilities into a single characterization of sys- 
tem reliability. 

This failure problem is illustrated by a re- 
cent breakdown of the ARPANET, a nation- 
wide packet switched network intended to be 
and normally regarded as highly reliable. 

• The network's builders recognized that 
component failure is inevitable in any 
system and designed the network to be 
tolerant of such failures. The approach 
taken was to design the network's traf- 
fic control algorithms so as to isolate 
each failure to the processor or other 
system element in which the failure first 
occurred. 

• The overall success of these algorithms 
and the software that embodies them is 
borne out by the rare occurrence of 
failure conditions that affect any 
significant portion of the netwoik. 

• But a recent failure did occur in the traf- 
fic control software itself— the very 
mechanism intended to minimize the 
spread of failure Bad data in one proc- 
essor was rapidly and systematically 
propagated throughout the network, 
bringing traffic to a standstill. Under 
normal conditions such propagation is 
necessary and desirable to allow the 
network to keep track of its current con- 
dition. U fortunately, the propagation 
of false ( n , like poison, pro; d fatal. 
Thus, V network s primary shield 
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against failure proved to be its Achilles 
heel. 

This example demonstrates how difficult 
it is to design Urge and complex systems 
which are also reliable. Nonetheless, in many 
situations a distributed system such as 
ARPANET may be much more reliable than 
a centralized system of the same size, be- 
cause of the distributed system's potential 
for isolating and therefore surviving local 
failures without a total system breakdown. 

Little data exist from which to calculate 
failure probabilities because of the newness 
of information technology and its low failure 
rate. In addition, each system is uniquely 
designed for its purpose; therefore very little 
useful experience has been accumulated that 
would be applicable to calculating the prob- 
ability of the potential failure rate for large 
complex systems in general. 

The problem of estimating risks under 
conditions characterized by an uncertain but 
very low probability of failure and by a very 
high potential cost of failure has stimulated 
a burst of new research in risk analysis. The 
National Science Foundation has initiated a 
program of research that should contribute 
to improving the ability to calculate more 
accurately risks for large systems over the 
long term. 

In addition, attempts are being made to 
design so-called "robust" systems. These 
systems have very high reliability, can 
diagnose failure, and in some cases can even 
replace failed components by switching to 
alternative ones. The message-switching 
computers that are custom-designed for use 
in the telephone network employ some of 
these techniques to achieve very high reli- 
ability, as doon-board spacecraft computers 
where long-term reliability is crucial. 

It is difficult to carry out risk analysis for 
integrated information systems for the fol- 
lowing reasons: 
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• Their complexity, which makes some 
design errors inevitable but also makes 
accurate estimations of system reli- 
ability very difficult. 

• The speed of computers, in which mil- 
lions of transactions are processed 
every minute, makes human monitoring 
virtually impossible. Consequently, sys- 
tem failures can quickly drive the sys- 
tem to a worst-case collapse before any 
human intervention can take place. This 
criticism was made during the congres- 
sional debate on the antiballistic missile 
system! It was argued that a system 
malfunction could fire the missile before 
any human intervention could detect 
the error and cancel the action. 

An automated national stock market 
or centralized check clearing system 
could also be subject to such catas- 
trophes. Banks or brokerage houses 
could be ruined in a matter of minutes, 
long before it was discovered that the 
system had failed. The potential victims 
would be the owners of the failed sys- 
tem, individuals with accounts, cor- 
respondent organizations, and, were the 
failure to cascade through other institu- 
tions, even all of society. 

• Centralization of data, which occurs in 
many large information systems and is 
partly motivated by the higher security 
possible with a centralized system. 
Even if failure rates continue to be as 
low as predicted, this concentration 
would greatly increase the size of a 
potential loss should the very rare event 
occur. 

• Interconnection between systems in- 
creases their vulnerability to failure by 
introducing another element, while at 
the same time providing a connecting 
path through which a failure at one 
node can spread to others, as was the 
case with the power blackout referred to 
earlier. 

A large, nationally networked infor- 
mation system may provide more day- 



to-day security by supplying instant 
backup to nodes that may fail. How- 
ever, there may be also a greater risk 
that the entire system will go down in 
the event of an unlikely or unexpected 
combination of events. 

• Societal dependence on the uninter- 
rupted operation of large information 
systems will increase along with poten- 
tial societal loss from their failure. The 
development of these systems is being 
motivated by the need for assistance in 
managing the increasingly complex ac- 
tivities of U.S. society and its organiza- 
tions. These systems then become inte- 
gral parts of the processes— central to 
their operation— rather than merely 
tools. 

This evolution to dependency can be 
seen already in the reliance of safe 
public air transport on the continuous 
operation of the computerized air traffic 
control system. In the commercial sec- 
tor, large stores and banks rely on the 
smooth uninterrupted operation of their 
centralized computer systems. Future 
EMS and EFT systems will like'y cre- 
ate similar societal dependencies much 
larger in scale than current examples. 

It is not hard to project into the 198CTs 
and envision the potential damage that 
could be caused by the failure or misuse of 
such systems as they grow larger, more com- 
plex, and more centralized. Some of the risks 
may be physical as in the air traffic control 
example or with a computerized nuclear reac- 
tor safety system. Others may be in the form 
of economic losses, such as the failure of an 
automated check clearing system or a na- 
tional automated securities market. Still 
other risks may be social, as would occur if 
the larger data systems such as the National 
Crime Information Center or an EFT pay- 
ment system were misused by the Govern- 
ment or by private concerns to exert undue 
control over individuals. 
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Issues 



Underlying all of these concerns is the 
realization that although the probability 
that any catastrophic event will occur may 
be low, the potential social cost of such an 
event can be extremely high— even a threat 
to national security. This problem of social 
vulnerability is crucial to many issues that 
Congress will be addressing relating to in- 
formation systems. 

Specific Systems and Threats 

Congress is already confronting these 
larger social vulnerability issues in the con- 
text of particular information systems: 

• The air traffic control system has 
reportedly failed several times, leading 
to pressures for a new improved sys- 
tem. Possible new systems are being as- 
sessed by OTA. 2 An important but dif- 
ficult question is the degree to which 
any new system improves reliability. 

• Press reports have suggested that the 
Defense Department's WWMCCS* 
command and control system is unreli- 
able, particularly when fully loaded 
under crisis conditions. 3 

• An article in the Washington Post sug- 
gests that the defense communication 
system is highly vulnerable, not only to 
full-scale nuclear attack, but to sabo- 
tage by terrorist groups. 4 

This last instance is the social vulner- 
ability issue carried to the extreme, the vul- 
nerability of a U.S. defense communications 
network to hostile attack. However, the line 
demarcating information systems that are 
vital to national security is difficult to draw, 
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for it may include major civilian domestic 
systems. 

Ever since Soviet interception of U.S. 
domestic telecommunications was reported, 
the executive branch has been working 
toward securing civilian government com- 
munications. They have also been concerned 
with the national security threats to domes- 
tic private communications, but the devel- 
opment of a policy has been slow and dif- 
ficult due to the need to avoid substantia! 
Federal intrusion into the private sector. 5 

. Events over the next decade, such as a 
chilling of relations with foreign adversaries 
or an increase in domestic terrorism, would 
focus congressional attention on the vulner- 
ability to attack of nonmilitary facilities 
such as EFT, EMS, or civilian government 
data systems. 

Calculating Risk 

Aside from the national securitv question, 
however, Congress will need to consider, the 
societal risks inherent in new information 
systems. The concern about risk will lead 
Congress and other policymakers to search 
for more flexible information technologies to 
implement, whose failure will not be so 
devastating to society. Such systems, if they 
can be developed, may appear to be less effi- 
cient or to cost more in the short run, but 
would reduce the overall vulnerability of 
society to catastrophe. 

Assignment of Risk 

In deciding how to define an acceptable 
risk, the extent to which American society as 
a whole will or should accept responsibility 
for losses incurred due to massive failures of 
information systems must be taken into con- 
sideration. 



(i I,ipsound, Private and Public Ih-fcnses Against Siwiet 
Inteneption of C S /Wr< ommunu atmn Problems and Pol- 
u v Points (Cambridge, Mass Harvard University Center for 
Information Pokv Research, 1979) 
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In the case of EFT, for example, the ques- 
tion might be whether the Government 
should insure liability against a major 
system collapse beyond the level currently 
provided by the Federal Deposit Insurance 
Corporation. A national automated securi- 
ties market would raise similar problems. 

When such losses have an extremely low 
probability, the difficulties associated 1 ; th 
assigning risk can be easily put aside. The 
implication is that the policy decisions will 
be made on an ad hoc basis only after a 
failure has occurred. However, the poLuical 
climate immediately after a major techno- 
logical failure may not be amenable to mak- 
ing policy, that would be sound over the long 
term and applicable to new events. 

Management of Risk 

A case can be made that much current 
Government regulation represents an at- 
tempt to manage risk in order to reduce 
hazards from consumer products, from 
drugs, from the workplace, or from the 
natural environment. 6 If national informa- 
tion systems create significant social risks, 
and if Congress chooses to attempt to 
mitigate those risks, several possible mech- 
anisms or mixes of mechanisms are available 
for consideration. 

• Regulation: Direct management 
through laws and administrative rules 
is currently being questioned as an ef- 
fective means to regulate risk. For ex- 
ample, din ct regulation was rejected by 
the Privacy Commission as an approach 
to the privacy problem. However, in 
specific sectors where the industry is 
already federally regulated, such as 
banking or securities exchange, Gov- 
ernment may choose to directly set 
policies for protecting information 
systems. 

The Government is establishing 
standards for secure design of systems 

*L)a\id Okrent. "Comment on Societal Kisk,' Scieme, vol 
208, Apr 25, 19*0, pp 372-:*95 
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used by Federal agencies. While these 
standards do not apply directly to the 
private sector, they could provide incen- 
tives for similar design, either by set- 
ting a favorable example or by estab- 
lishing a minimum standard of practice 
that the courts might recognize in lia- 
bility suits. 

Alternatives to regulations may also be 
considered. Two that have been proposed 

are: 

1. Liability: Liability law is the chief risk 
deterrent through the legal mechanisms 
available, e.g., lawsuits, 

• Liability case law is very slow to 
develop, depending as it does on an 
accumulation of court decisions and 
appeals. 

• The message sent to organizations 
through court decisions can be vague 
and difficult to interpret. Thus, an 
unnecessarily conservative approach 
may be inadvertently encouraged, 
and promising socially desirable tech- 
nological innovations may be pre- 
cluded. 

• The courts can find it difficult to deal 
with highly complex technical issues 
in the context of litigation. 

• Liability law varies from State to 
State, particularly in terms of the 
ways in which negligence and non- 
negligence are defined. This creates a 
climate of uncertainty with respect to 
how the law will be applied. 

2. Insurance: While secondary to liability 
law in importance, insurance is another 
method of controlling risk by spreading 
it over a large number of persons or 
organizations. Its cost is an incentive to 
the client to reduce risk. This is par- 
ticularly true where there is a potential 
for catastrophic loss. In such cases, in- 
surance companies generally require an 
extremely large deductible and/or im- 
pose limited liability ceilings. However, 
any attempt to turn to insurance as a 
mechanism to control risk must deal 
with the following problems: 
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insurance can be discriminatory in 
ways not deemed to be in the social 
interest; 

by concentrating on minimizing loss 
to the insured, broader social losses 



are ignored or underrated; and 
when the cost of the insurance is not 
a sufficient deterrent, it can actually 
encourage persons or organizations 
to assume risks that are not prudent. 
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Constitutional Rights 



Introduction 



Little legal precedent exists, in many 
cases, for applying constitutional law to the 
issues raised by computer-based information 
systems. As the courts begin to deal with the 
novel issues raised by the application of com- 
puter technology, they will probably at- 
tempt to apply traditional concepts. In this 
way, these new issues will become incorpo- 
rated into existing legal precedent. 

Legislative remedies may be called for 
when the courts do not find constitutional 
protections for threats to individual rights 
created by unforeseen technological devel- 
opments such as television cameras, elec- 
tronic wiretapping, and computer data 
banks. It is difficult to predict in advance 
precisely which computer-raised constitu- 
tional issues will create major legislative 
problems and which will be easily accommo- 
dated in the courts. Expert opinions vary 
widely, and little legal research has been 
done as yet. 

The legal survey task of this study iden- 
tified five areas of constitutional law that 



may be affected by information systems. 
These are: 

• first amendment rights, which guar- 
antee freedom of religion, speech, the 
press, peaceable assembly, and the 
right to petition for redress of griev- 
ances; 

• fourth amendment rights, which guar- 
antee against unreasonable search ajid 
seizure by the Federal Government; 

• fifth amendment rights, which guaran- 
tee that a person may not be compelled 
to be a witness against himself or be 
deprived of life, liberty, or property 
without due process of law; 

• sixth amendment rights, which guar- 
antee the right of a speedy and public 
trial; and 

• 14th amendment rights, which guaran- 
tee that a State cannot deprive any per- 
son of life, liberty, or property without 
due process of law nor deny any person 
within its jurisdiction the equal protec- 
tion of the laws. 



First Amendment 



The principal purpose of guaranteeing 
freedom of speech is to ensure a free 
marketplace of ideas. Courts have tended to 
balance this freedom against other compel- 
ling social concerns, e.g., national security or 
public safety. For example, there have been 
a number of recent cases about the rights of 
reporters to protect their sources. However, 
certain characteristics of specific commu- 
nication media affect how that goal is 
achieved. 

The printed page is the least regulated 
communication medium. No Government in- 
terference in the content of published mate- 



rial is tolerated with the exception of some 
fairly limited and still contested restrictions 
in the areas of pornography, national secu- 
rity, libel, and trade practices. The relatively 
low cost and ubiquity of printing technology 
usually guarantees universal access to it for 
those who have something to say. 

The common carriers are more restricted. 
Telephone and mail service are regulated 
monopolies that control the huge capital and 
institutional structures necessary to carry 
messages in various forms. Nevertheless, 
the communication capacity is very large. 
Without regulation, the potentiality would 



ERLC 



in 



105 



106 • Computer Based Nationdl Information Systems Technology and Public Policy Issues 



exist that an operator might restrict a per- 
son's access to the medium. Regulation is 
therefore orLnted toward assuring universal 
access by requiring carriers to provide uni- 
form service to all at regulated prices. As 
with print, there are no limitations on mes- 
sage content aside from certain restrictions 
on pornography and other illegal activities. 

The broadcast medium has a limited 
number of owners and operators as well as a 
limited capacity. Regulation must take into 
account the existence of these inherent re- 
strictions on its use. Consequently, the 
thrust of the regulation is not the right of all 
to speak, but rather the right of all to be ex- 
posed to a "free market in ideas.*' Urder this 
interpretation, the Federal Communications 
Commission (FCC) has actively specified 
standards for broadcast content in such re- 
quirements as the "fairness'* doctrine. 

Cable services share both broadcast and 
common carrier characteristics, since their 
capacity is still limited but much greater 
than that of broadcast services. FCC, in its 
early licensing policy, required cable stations 
to provide public access channels that would 
be available to any potential user. (This re- 
quirement, -among others, was rendered 
moot by a Supreme Court decision restrict- 
ing FCC's authority to regulate in this area.) 1 
If cable providers have local monopolies over 
the delivery of information services to homes 
and businesses, there is a public interest in 
preventing the cable provider from exercis- 
ing religious, political, or artistic censorship 
over the content. 

Since the nature of first amendment pro- 
tections is so strongly dependent on the 
characteristics of the media, it is reasonable 
to expect that new information services of 
the future will force the development of new 
types of policy. Some of the significant char- 
acteristics that may determine these policies 
are. 



"bvdrral Conimumatntttw ( % ttmmts\it*n v Xfultvest Vulva 
440 U S 689. 59 L E 0 2d b9.J, 99 Supreme Court 1 M5 
(1979) 
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• Restricted ownership and control of 
physical facilities. Very high capital 
investments are required to install 
physical communication channels into 
homes and businesses. Even if competi- 
tion in providing information services is 
encouraged, it is likely that there will be 
relatively few suppliers of facilities,* 
leaving the control over the physical 
communication lines to a few large orga- 
nizations. 

• Much greater capacity. The capacity of 
future communication lines into homes 
and businesses will be much greater 
than the current telephone and broad- 
cast facilities. Cable and direct satellite 
broadcast lines will provide more chan- 
nels and greater information capacity 
per channel. In addition, communica- 
tion from the home back to the sender 
will be possible. Some limited im- 
plementations of two-way capability 
already exist, and expansion is likely 

er the next decade. 

• lAore producers. The larger number of 
communication channels into the home 
coupled with low-cost national distribu- 
tion systems are expected to lead to a 
proliferation of information producers 
and distribytors beyond the current 
limited number of television net- 
works.** Services such as those provid- 
ed by the new "super stations" that 
operate nationwide over local cable net- 
works, pay television networks such as 
Home Box Office, and upcoming direct 
satellite broadcast stations represent 
only the leading edge of such a trend in 
the entertainment area. In data com- 
munications, MicroNet and The Source 
are new services designed to link own- 
ers of personal computers with each 



♦The actual number of facility suppliers is growing (eg, 
specialized common carriers and satellite carriers who supply 
a significant portion of their own facilities! However, this 
growth is much slower than that of the information pro- 
ducers 

**The new cable TV systems bring built in the United 
States have up to 50 TV channels, some will have as many as 
100 TV channels 
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other and with larger computers, data 
banks, and information processing serv- 
ices over a nationwide network. 
• Low-cost access. Network broadcasters 
pay thousands of dollars per minute to 
generate and transmit information. The 
new information and communication 
technology will substantially reduce the 
cost of distributing information. There- 
fore, it will be easier to enter the mar- 
ket, and a wider variety of information 
services will be made available. 

The principal first amendment issue fac- 
ing the Government will be to encourage the 
maximum freedom of expression— fostering 
the "marketplace of ideas"— in new elec- 
tronic media that have been tightly regu- 
lated in more traditional forms. Factors that 
could work against this goal include pres- 
sures for Government censorship, monopoly 
in the production and distribution of certain 
kinds of programs and services, and exces- 
sive control over content by the operator or 
operators of the physical communication 
channels. 

Another issue may serve to link first 
amendment rights with privacy concerns. 
Extensive data collection and possibly 
surveilL ice by Government and private 
organizations could, in fact, suppress or 
"chill" freedoms of speech, assembly, and 



even religion by the implicit threats contain- 
ed in such collection or surveillance. 2 These 
threats might be directed as much at the 
"listener" as the "speaker." Clearly, 
automated information delivery systems 
possess a much greater capability of record- 
ing, storing, and analyzing in detail the flow 
of information from all sources into homes 
than do manual systems such as bookstores, 
newspapers, and the like. 

As a consequence, consideration needs to 
be given to the distinction between informa- 
tion that is regarded by people to be private 
in nature and that which is public. Such a 
distinction may depend on whether the use 
of the information favors or is detrimental to 
the interests of an individual. For example, 
one does not usually attempt to keep secret 
the titles of books borrowed from a public 
librrry. However, an accurate profile of an 
individual's interests and attitudes could be 
provided by a complete dossier on that per- 
son's reading habits. Since computer tech- 
nology has the potential capability of assem- 
bling such data bases, it may necessitate 
creating new definitions of the boundary be- 
tween public and private information. 



Sam J Krvin, "The Kirst Amendment A Living Thought 
m the Computer Age/* Cotumnta Human Rights Review, vol 
I. \o 1, 1972, pp 13-47 



Fourth Amendment 



The fourth amendment protects the per- 
sons, houses, papers, and effects of in- 
dividuals against unreasonable searches and 
seizures by the Federal Government. The 
study identified three significant areas in 
which new computer and communication 
systems may affect the interpretation and 
application of the fourth amendment. 

1. the use of personal and statistical data 
contained in automated information 
systems as a justification for search 
and seizure; 



2. the search and seizure of information 
per se as personal property, particularly 
in electronic form; and 

3. the use of automated information sys- 
tems as a tool for search and seizure 
operations. 

Justification for Data Collection 

Criminal justice agencies have tradition- 
ally kept files that form the basis of their in- 
vestigations. Depending on the system de- 
sign, however, automation can change the 
nature of this recordkeeping in several ways: 
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• there are more individuals as data sub- 
jects; 

• there are more data per individual; 

• there is more centralization and correla- 
tion of diverse data sources; 

• there is wider access to the data by 
more persons; 

• there is faster access to the data; and 

• there is more efficient remote access to 
the data. 

Using the technology to the fullest capac- 
ity, it would be possible within the next 
decade for a policeman to obtain instantly a 
complete identification and dossier on an in- 
dividual stopped in the street. As criminal 
justice information systems approach this 
capability, courts will become more inter- 
ested in questions such as 'reasonable 
cause" for such police actions as stopping 
and searching an individual. There is also the 
possibility of psing statistical data as a basis 
for establishing probable cause. 

In their concern, courts will probably look 
at issues of data quality. An erroneous 
record in a local manual file could cause an 
individual some distress, but an erroneous or 
incomplete record in a large, automated sys- 
tem with national or regional access could 
lead to more serious compromise of indi- 
vidual rights unless the record was promptly 
corrected.* This consideration combined 
with other related reasons could motivate 
courts to mandate that stringent data qual- 
ity requirements must be met by automated 
systems before information from them could 
be used as reasonable cause for criminal 
justice actions.** In theory, checking and 
correcting records could be done more quick- 
ly with an automated system. 



*In addition to the issues arising from the protections 
guaranteed bv the fourth amendment, if access to thesWem 
were looselv controlled and data used for purposes other 
than criminal justice such as employment or credit, serious 
harm could result 

**The issue of data quality is explored in more detail in the 
OTA «Uudv on \TIC CTH, in progress 
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Information as an Object of 
Search and Seizure 

The same information and information 
technology on which most institutions and 
people in this country increasingly depend 
for the conduct of their everyday lives are 
also becoming of greater importance to in- 
vestigations conducted by the criminal jus- 
tice system. Files, ledgers, correspondence, 
and address books have always been the ob- 
jects of police searches in certain types of 
crimes. The criminal justice system will in- 
creasingly have to deal with their much more 
extensive computer equivalents, which may 
well raise new fourth amendment questions. 

Two trends serve to increase the exposure 
of persons to searches. The first is that in- 
formation previously unrecorded in any form 
will become collectable in computer data 
banks; electronic mail and electronic point of 
sale systems, for example, collect and store 
more data than the systems they replaced. 
The second trend is that data previously in 
the hands of individuals are now collected 
and stored by third parties, throwing the 
ownership of such data into question. 

In a recent case,* the Supreme Court ruled 
that an individual's bank records belonged 
to the bank and were not protected constitu- 
tionally as his or her personal property. One 
basis for this ruling was that the use of a 
bank account was a voluntary action. Yet, it 
is questionable whether future participation 
in a computerized society can be construed 
to be voluntary if the alternative is to forgo 
all services necessary to live comfortably as 
a member of that society. Extensions of such 
reasoning could leave only a hollow shell of 
fourth amendment protection for personal 
records, while eroding any substantive effec- 
tive barriers against Government intrusion. 

As this happens, Congress will be asked to 
reestablish these protections legislatively. 
In the above cited case, a congressional 
act** addressed the problem of protecting 

*l mttnl States \ Miller 42"> V S 4.VWl97fil 
♦•TheRitfht to Financial Pri\a(\ \rtH2 V SC .'MOJ 
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personal records held by financial institu- 
tions from access by the Federal Govern- 
ment. 

The search and seizure of computerized 
records will probably present courts and 
legislatures with a number of problems in 
balancing the needs of law enforcement with 
fourth amendment protections. For example: 

• When identifying records as objects of 
search and seizure, traditional stand- 
ards that were reasonably effective with 
written documents may not apply when 
the information sought is buried in a 
very large, or even geographically dis- 
tributed, computer data file. 

• In its original or primary form, com- 
puter data is unreadable by human be- 
ings. Thus, seized evidence may be in a 
primary form, such as magnetic tape or 
disk, or it may be in a secondary form, 
such as printouts or charts. The status 
of this type of evidence may be con- 
testable, ranicularly if a law enforce- 
ment agency is required to perform so- 
phisticated iile manipulation in order to 
pull out the particular information it is 
trying to introduce as evidence. 

• If the information is in coded form (en- 
crypted) and the key to its decoding 
(decryption) is only in the head of the 
suspect, fifth amendment protections 
may allow that person to withhold the 
encryption/decryption key or the en- 
cryption algorithm. Similar problems 
exist even short of ent vption. Informa- 
tion can be hidden in a large data bank 
in such ways that it would be nearly 
impossible to find without knowing its 
precise location. 

It is expected that the normal evolution ot 
law in the courts will be able to deal with 
many of these problems as they occur. How- 
ever, as the Miller case illustrates, the logical 
extension of legal principles into the in- 
formation age can on occasion seriously alter 
the balance of power between individuals 
and Government, threatening protections in- 
cluded in the U.S. Constitution and Bill of 



Rights. In such cases, a legislative remedy 
will become necessary. 

Information Technology as a Tool 
for Search and Seizure 

Despite the difficulties of collating in- 
formation that is dispersed and buried in 
very large geographically distributed com- 
puter files, national information systems 
may provide mechanisms for surveillance 
that penetrate more deeply into an individ- 
ual's privacy than was previously possible. 

In determining when fourth amendment 
protections apply, law enforcement dis- 
tinguishes between "surveillance" and 
"search and seizure." There is no violation of 
this protection in observing an individual's 
daily public activity. It is the actual search 
of a person, a person's premises, or the seiz- 
ure of personal records that requires war- 
rants. 

Information technology blurs the line be- 
tween public and private activity. A nonelec- 
tronic mail cover requires approval by the 
°ostal Inspection Service but not a search 
warrant because only the outside of an 
envelope is examined. In an electronic mail 
system, however, no distinction may exist 
between the "outside" (or address) and the 
"inside" (or contents) of a message. 
Therefore, it may be difficult to distinguish a 
mail cover from a wiretap, which would re- 
quire a warrant issued by a court upon prob- 
able cause, unless some form of coding couid 
act to "seal" an electronic message as an 
envelope seals a physical one. 

Similarly, the observation of shopping 
habits by following a person from store to 
store is surveillance. However, the use of an 
electronic funds transfer system to gather 
the same type of information would be far 
more intrusive, since much more data, some 
of it of a highly personal nature, could be col- 
lected in secret. The question is whether 
such transactions are to be considered public 
or private behavior. 
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The telephone created the possibility of 
wiretapping, which has stimulated numer- 
ous debates balancing the needs of law en- 
forcement against those of individual pri- 
vacy and fourth amendment protection. The 
courts and Congress have been struggling 
for some time with interpretations of the 
fourth amendment in terms of wiretapping. 
Information systems that provide such serv- 
ices as electronic mail and electronic funds 
transfer will likely provoke similar debates 
in Congress. 

There is no doubt that access to com- 
puterized information could assist law en- 
forcement in detecting crime and in prose- 
cuting offenders. Consequently, the benefits 
afforded criminal justice will be a compelling 
argument. But no less compelling will be 
arguments citing the potential police-state 
dangers of widespread uncontrolled informa- 
tion surveillance of individuals. 



This threat may become even more dan- 
gerous, since the surveillance of an auto- 
mated information system can itself be 
automated, permitting an agency to keep 
tabs on large numbers of individuals effi- 
ciently. Ultimately, the information technol- 
ogy would permit both the tools and the op- 
portunity for widespread surveillance of 
most of society. At present, the sizable 
amount of manpower needed to physically 
observe a person over a period of time acts as 
a check on such large-scale surveillance. 

Finally, there may be a point beyond 
which a collection of comprehensive informa- 
tion about an individual, although comprised 
completely of information in the public do- 
main, may assume the characteristics of pri- 
vate information. An individual's concept of 
private v. public information depends in part 
on the perception of its completeness and the 
ways it could be used against him/her. 



Other Constitutional Issues 



This study has identified several ways in 
which information systems are posing chal- 
lenges to interpretations of the fifth, sixth, 
and by extension to States, the 14th amend- 
ments. (See beginning of this chapter for 
descriptions of these amendments.) 

Managerial Due Process 

More and more individuals are receiving 
an increased number of benefits and services 
from the Government. Information systems 
have become an indispensable tool for deal- 
ing with this growing workload (see ch. 8). To 
the extent that access to these services in a 
timely and fair way is a constitutional "due 
process" concern, the effect of information 
systems will be to increase scrutiny by the 
courts and by Congress of the "fairness" of 
the very large bureaucratic systems that will 
become established in order to operate serv- 
ice programs. 1 

'.J L Md*.hdW t Thr Management Side of I)u<> Prwss 
Cowl! !, t tn Rt>t wu .June h»7 1 pp 772*21 



The following questions about an admin- 
istrative information system are likely to be 
of particular interest. 

• Whether the information system pro- 
vides for making timely decisions. 
While information technology can po- 
tentially speed bureaucratic processes, 
their implementation can often have the 
opposite effect. 4 

• Whether the information in the system 
is accurate and timely enough to ensure 
"fair" decisions. This question is sim- 
ilar to that of ''reasonable cause ' raised 
in the criminal justice discussion above. 

• Whether there are subtle biases "built 
in" to the automated system that are in- 
visible to the system operators and 
agency administrators because they are 
embedded in the code of the computer. 
Very large systems that "mass pro- 
duce" decisions in such areas as health 

4 DC Youth CKT \ .Jobs Program Still I'ldtfutil h\ iVUs 
mPa\. Washington P<^t Julv 27. I <»«(),«,»»<- H p I , col 1 
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benefits, student loans, or tax returns 
may react quickly to what the computer 
recognizes as "normal" applications, 
but reject "unusual" claims. If. as a 
consequence, clients are subjected to an 
unacceptable amount of hassle and de- 
lay, the definition of "normal" used by 
the computer may become subject to 
due process challenge. 

Information Collection 

The increased recordkeeping and data col- 
lection requirements imposed by the Gov- 
ernment on organizations and individuals 
was one of the trends identified in this study. 
The quantity of information that individuals 
and organizations now must provide to the 
Governmeht-either mandatorily (e.g., for 
census, tax, or regulatory purposes), in order 
to receive benefits (e.g., loan guarantees or 
medical payments), or to justify manage- 
ment decisions— is already extensive and 
growing larger. 

There may be a threat to fifth amendment 
protections stemming from the use of per- 
sonal or corporate computer data that have 
been collected by the Government for one 
purpose as evidentiary material in unrelated 
criminal or regulatory cases. 

Social/Psychology-Based 
Applications 

In addition to the straightforward uses of 
information systems to collect data and 
automate decisions, there are a number of 
new computer applications that use analyti- 
cal techniques being developed in social 
psychology. The actual effectiveness of 
these techniqu. 3f which purport to predict 
and analyze human behavior based on the 
statistical analysis of information about in- 
dividuals, is still being debated. Social scien- 
tists anticipate a steady improvement in the 
. ability to predict future social behavior 
based on the analysis of seemingly unrelated 
personal characteristics or of the results 
from batteries of tests. If these capabilities 
improve as expected, some serious due proc- 



ess questions could be raised by their use in 
the criminal justice system. Three particular 
applications already appear to pose prob- 
lems. 

I. Jury selection: A small industry has 
grown up around the use of computer- 
ized dossiers of potential jurors along 
with computer models for predicting 
juror behavior. At this time, the tech- 
nology is very expensive and its value 
is controversial. While some defense 
lawyers have claimed success owing in 
part to the use of these systems, it is 
hard to prove conclusively that the out- 
come of a particular trial was in any 
way due to specific juror selection. 

However, future computer technol- 
ogy will make this application cheap, 
and far more personal data about poten- 
tial jurors will be available, legally or il- 
legally. Furthermore, there is a suffi- 
ciently sound social scientific basis 
underlying this type of use to suggest 
that predictive techniques will be likely 
to improve in effectiveness. If so, the 
entire concept ot an "impartial" jury as 
required by the sixth amendment may 
be challenged. 5 
2. Lie detectors: Lie detecting technology 
has already raised many difficult prob- 
lems for Congress and the courts. 
Computer-based technology will add a 
new dimension to these still unresolved 
issues. So called "voice stress" ana- 
lyzers are being manufactured and mar- 
keted for relatively low prices. This 
type of lie detector, which analyzes the 
degree of stress in a speaker's voice, 
depends on the assumption that meas- 
urable stress indicators appear when a 
lie is being told 

Unlike older lie detector technology 
based on the polygraph, voice stress 
devices can be used without the co- 
operation or even knowledge of the sub- 



John L ttrfnanidker, "Computer and Scientific Jurv Se- 
lection AlVdkuIjtH Rjvk, I'ntrrrsttv nf Detroit Journal of 
CrhantAiu vol V> 4 winter 1 JPM, pp ;$ 1.V.T70 
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ject. This single difference puts the use 
of lie detectors into an entirely new 
reaim of fifth amendment problems, as 
well as opening up more generally new 
problems of social interaction in such 
areas as employer-employee relation* 
ships. 

There are three distinct problems to 
be addressed* the effectiveness of such 
technology, the ways in which it is used 
by Government agencies and by police, 
and its use by employers, reporters and 
others for whom it would be both a tool 
for their work and a possible means of 
abusing individual rights to privacy. 
. Predicting criminal behavior: Much re- 
search has been done on the application 
of computer-based social science and 
statistical models to files of personal 
data and the results of psychological 
tests, in order to predict behavior. 
Techniques are being studied for detect- 
ing tendencies toward juvenile delin- 
quency, drunken driving, or violent 
antisocial behavior, and for security 
checks by the Government. Conceiv- 
ably, such research could be applicable 
not only to criminal justice problems, 
but also to such tasks as approving 
credit, determining insurability, or hir- 
ing and promoting employees. 

As social scientists improve this pre- 
dictive capability, important questions 



of fifth and 14th amendment rights will 
be raised. Essentially, individuals may 
be denied rights, privileges, and ben- 
efits based, not on past performance, 
but on a prediction of future tendencies. 
Courts will be examining these predic- 
tive models very carefully for their ac- 
curacy, relevance, and fairness. They 
will also be addressing the fundamental 
question of the appropriateness of these 
models and their potential for dis- 
crimination. 

The problem will be to establish 
proper boundaries. Important decisions* 
have often been based on estimates of 
an individual's future performance. An 
employee who does well in one job 
might be expected to perform equally 
well when promoted. On the other hand, 
society cannot imprison a person w ,o a 
computer model predicts may someday 
rob a bank. But should that knowledge 
be "reasonable cause" to monitor such a 
person closely or deny employment? 

New information system applications 
will increase the emphasis on drawing 
clear boundaries between what ways of 
using them are and are not acceptable. 
Particularly difficult equity issues will 
be raised if the results of such predic- 
tive models were to discriminate among 
groups that have experienced discrim- 
ination historically. 
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Regulatory Boundaries 



As computer-based information systems 
evolve, they challenge traditional concepts 
of boundaries—physical or social— that are 
reflected in the law and regulatory policy. 
The integration of computer and communi- 
cation technologies form systems that cross 
boundaries between nations, States, and 
organizations. The issue of transborder data 
flow discussed below exemplifies the kinds 
of international problems created by such 
integration. Others include the following: 

• Interstate conflict: When States have 
conflicting laws involving information 
or information processing, for example, 
property tax laws that cover computer 
data bases, an integrated data system 
that exists in a number of different 
States can raise difficult questions of 
legal jurisdiction. 

Furthermore, some States may be- 
come data havens because they have 
weaker laws.* Computer networks also 
allow State-regulated services such as 
banking to be offered across State 
borders, thus challenging traditional at- 
titudes toward single State banking. 
Telephone bill payer accounts, for ex- 
ample, can be used across State bound- 
aries. 

• Federalism: Linking Federal data sys- 
tems with local systems complicates 
jurisdictional problems even further. 
The Federal Bureau of Investigation's 
National Crime Information Center 
(NCIC) is an example where the tradi- 
tional autonomy of local and State crim- 
inal justice organizations has com- 
plicated the Federalism issue (see the 
OTA assessment of NCIC/CCH, in pro- 



*A system operator could maintain the computer and data 
base in a State with a lenient le^al environment, and access it 
by a terminal in a State with stricter laws 
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gress). Similar problems could also arise 
by linking together Federal and State 
systems that contain data concerning 
such matters as taxation, welfare, 
education, medical care, and drug 
abuse. 

• Antitrust: The economics of large inte- 
grated data systems, coupled with the 
potential for increased convenience to 
the customer, may push service pro- 
viders to use shared facilities for bank- 

- ing, transpoi Nation scheduling, reserva- 
tion systems, and so on. The Depart- 
ment of Justice and other regulators 
will be interested in whether such 
shared facilities create monopolistic 
barriers to new entrants or are mecha- 
nisms for control of the market, or 
whether they encourage competition by 
reducing the cost of access for smaller 
firms. 

Information technology is changing form 
so fast that it is tending to outstrip the 
working definitions of devices and services 
that serve as the basis for law and regula- 
tion. These definitional problems relate both 
to the technology itself, and to the products 
and services that depend on it. 

• Computers or communication: The best 
known example is the continuing at- 
tempt by the Federal Communications 
Commission to establish what services 
and what technologies are already 
"communications," thus regulated, and 
what are "computer" services and tech- 
nologies, thus not regulatable. Their 
second inquiry on these questions, 
which began in 1976, only recently 
resulted in an opinion 1 that is now under 



'Second Computer Inquiry Docket No 20828, final decision 
adopted Apr 7, 1980, FCC 80-189, and reported as 77 FCC 2d 
384 11980) See ako the Memorandum Opinion and Order, 
adopted Oct 28. 1980, FCC 80-628 
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court challenge. Even if the definition is 
accepted, there is no reason to believe 
that the problem has been permanently 
resolved. The general trend toward de- 
regulation of ^11 technology and serv- 
ices, however/ may render the question 
less critical. 

• Branch banking; Many States have 
laws that either prohibit or tightly 
regulate branch banks. An issue that 
has been debated considerably is 
whether the automated extensions of 
banking (e.g. automatic teller machines 
(ATMs) or pay-by-phone services) con- 
stitute "branches" in the usual meaning 
of the law. Since ATMs and telephone 
service can be dispersed widely as well 
as cross borders, significant issues 
centering on antitrust and interstate 
banking rest on the way in which a 
branch is defined (see the OTA assess- 
ment of electronic funds transfers, in 
progress). 

• The status of electronic mail: Electronic 
data transmission has opened a major 
policy question about the definition of 
mail. As with the computer/communica- 
tion issue above, this definition is 
significant because it places a class of 
services under one or another set of 
regulations. Unlike many other coun- 
tries that have combined postal and 
telecommunication services under one 
national agency, the United States has 



pursued completely different ap- 
proaches to regulating each service 
category. Electronic mail, in its various 
forms, provides a new service with 
features of both manual delivery and 
telecommunication, and may pose new 
and difficult regulatory questions (see 
the OTA assessment of the role of the 
Postal Service in electronic mail, in pro- 
gress). 

• Bank information services: Some very 
large banks have developed elaborate 
data processing hardware and software 
to support their operations. They have 
found that the sale of these products 
and information services to other 
smaller banks can be a profitable enter- 
prise. In their view, it is a natural exten- 
sion of their banking services. The serv- 
ice bureau industry, which sells access 
to computers and programs, does not 
agree. It contends that banks are using 
their enormous capital resources to 
enter an entirely new, unrelated field, 
and should not be allowed to do so 
under laws that strictly regulate the 
proper activities of banks. 2 The out- 
come may hinge on whether these new 
information services constitute banking 
in a sense compatible with law. 



"Citibank A Rising Giant in Computer Ser\ ices. Husi- 
ness Week Aug 4, 1980. pp r>l-56 



Computer Crime 



The changing nature of crime in our in- 
formation society creates problems in detect- 
ing and prosecuting crimes against informa- 
tion systems. 3 

• New types of abuses occur for which 
there are no appropriate laws. 

'Susan H N cum. The Criminal Law Aspects of Computer 
Abuse Federal Criminal Code and The Criminal La it Aspects 
of Com put' r Abuse State Penal Laws, Stanford Research In- 
stitute, I '^76 



• Traditional definitions, for instance of 
theft, may be inapplicable when in- 
formation is the object of the criminal 
activity. 

• Procuring evidence in information 
crimes can complicate or stop prosecu- 
tion. 

It may be that these problems will be 
temporary, and that the legal system will 
shortly be afr to accommodate itself to 
these types of crimes. It has been suggested, 



ERLC 



Ch 12— Regulatory and Other Issues • 117 



however, that the inherent nature of in- 
formation and computer crimes mandates 
new laws. 

Congress has recently considered two bills 
that address computer crime. The Senate bill 
would make it a Federal crime to use com- 
puters as tools for criminal assault or as its 
object.* The House** addressed the prob- 
lem of protecting the providers of in-house 
information services, in particular cable and 
broadcast entertainment companies such as 
Home Box Office, from what is called "pirat- 
ing."*** 4 The information industry feels 
that unless governmental sanctions are used 
to protect its products and services, there 
will be little incentive to provide them. The 
radio hobbyists, who are among the major 
"pirates, "counter that to date practically no 
technological safeguards are used by off-the 
air pay TV and cable TV, and that reason- 
able use of more secure technology would 
safeguard these signals without having to 
legislate a new class of criminals into ex- 
istence. 

Although neither bill was passed by the 
96th Congress, the problems that motivated 
them remain. It is likely that similar legisla- 
tion will be introduced in the 97th Congress. 
Computer crime laws have already been 
passed by 10 States, and at least another 5 
have bills pending* (see table 8). 

With the support of the Federal Govern- 
ment, researchers are exploring the nature of 
computer crime, the methods used and the 
types and motives of criminals. 6 Even with- 
out new laws it is of particular importance to 



Table 8.— States Passing or Considering 
Computer Crime Legislation 



Arizona 

California 

Colorado 

Florida 

Hawaii 

llhno'S 

Massachusetts 
Michigdn 
Missouri 
New Mexico 
North Carolina 
Pennsylvania 
Rhode Island 
Utah 



Passed 

October 1978 
January 1980 
July 1979 
August 1978 
(a) 

September 1979 
(a) 

March 1980 
(a) 

April 1979 
June 1980 
(a) 
(a) 

May 1979 



a Legsbtation Pending 

SOURCE Computer Bus.ness Equipment Manufacturers Asso 
c«ation Shite Legislation Stdtus Report 1980 



inform the staffs of Federal and local law en- 
forcement and criminal justice agencies 
about the impact of this new type of criminal 
activity on their work. 7 

To date, studies of computer crime and 
computer abuse have emphasized the acts of 
an individual or group of individuals against 
an organization. Some observers have noted, 
however, that the computer can also be used 
by organizations to take advantage of cus- 
tomers or clients. 8 Customers of organiza- 
tions using electronic billing, funds transfer, 
or calculating aids (e.g., supermarket scan- 
riers) may simply be defrauded. Further- 
more, computer systems are used for making 
many decisions that affect people s lives, 
from political apportionment to setting 
pollution standards and assessing the effec- 
tiveness and hazards of a new drug. There- 
fore, there will likely be some temptation for 
various interests to misuse the systems they 
run, for their own purposes. 



*S 210 

♦•H H 7747 <H R 8192) 

♦••Pirating is stealing the signal and decoding it. and is 
easy to do with current technology 

41 The Piracv Danger to Subscription TV." Business Week, 
Sept 29. 19*0,pp 44 

'Computer and Business Equipment Manufacturing Asso- 
ciation. First State Legislation Status Report," Washing- 
ton. D C 1 9*0 

Dunn B Parker. Cum> u \ Computer Charles Scnbner's 
Series. \ew York, 1978 



Department of Justice, Computer Crime CnminalJuttice 
Resource Manual, 1979 

'Hob Kling. "Computer Abuse and Computer Crime as 
Organizational Activities," Computers ami Lau Journal, 
spring 1980, pp 103-427 
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Transborder Data Flow 



During the past several years, interna- 
tional attention has been focused on a collec- 
tion of issues referred to as transborder data 
flow. These diverse issues have a common 
origin in the increased communication of 
data across national boundaries. 9 In the de- 
veloped world, they have crystallized around 
the proliferation of national privacy laws 
that usually specify the treatment of per- 
sonal data in domestic systems, and also set 
standards for the transfer of such data 
across national boundaries. 10 Several poten- 
tial problems have emerged that would act 
to constrain the international flow of in- 
formation. 

• Different and conflicting laws could 
make the operation of distributed com- 
puter systems by large multinational 
corporations difficult if not impossible. 

• Third-party organizations providing 
computer services across national 
borders could be inhibited from com- 
peting with similar firms operating 
within countries. 

• The extension of privacy protection to 
the concept of legal persons such as cor- 
porations could vastly expand the types 
of information controlled, by restric- 
tions placed on transmission over na- 
tional boundaries. 

Some efforts are underway to reconcile 
these various constraints. The Ministers of 
the Council of Europe have approved model 
legislation that would provide guidelines for 
national privacy laws. 11 However, the United 
States is not a member of the Council, and 
even more significantly, the U.S. approach 



*R Turn (ed ), Transborder Onto Hon s, report ot the Amer- 
ican Federation of Information Proe?ssing Societies, Panel 
on Transborder Data Flow. 1979 

'"Department of Commerce, Selected Foreign National 
Data Protection Lau s* and Bills. OJfice of Telecommunica- 
tion, special publication 78-19, 1978 

"Council of Ministers of the Council of Europe, "Council of 
Europe Convention for the Protection of Individuals With 
Regard to Automatic Processing of Personal Data,' ap- 
proved September 1980 



to privacy law does not fit the Council model. 
Thus, from the U.S. perspective the Council 
approach does not provide a solution. 

The Organization for Economic Coopera- 
tion and Development has developed a vol- 
untary agreement for its member states that 
would be more flexible. 12 The initial en- 
thusiasm for a third approach— an interna- 
tional treaty on information flow— appears 
to have been dampened by the difficulties in 
getting even a general voluntary agreement. 

In general, the U.S. position on this issue 
has been to favor the free flow of information 
across borders, and to view the European 
privacy efforts as principally a disguise for 
protectionist control of international com- 
mercial data processing. Some Europeans 
maintain that their actions derive principally 
from their deep concerns about privacy, 
pointing to historical abuse by totalitarian 
nations of government and private record 
systems. 13 

Another aspect of the transborder data 
flow issue is the concern by the Third World 
countries that control over information and 
information flow is a form of international 
power exerted by the Western nations. This 
attitude was manifested both in negotiations 
at the World Administrative Radio Confer- 
ence 14 and in proposals in the United Nations 
Ef*""ational, Scientific, and Cultural Orga- 
n._^on (UNESCO) for a "New Information 
Order/* 



"Council of the Organization for Economic Cooperation 
and Development, Recommendation of the Council Concern- 
ing Guidelines Governing the Protection of Privacy and 
Transborder Flo it s of Personal Data, adopted Sept 23, 1980 

"Department of Ftate. Bureau of Oceans and International 
Knvironment and Scientific Affairs, Selected Papers on Inter- 
national Policy Implications of Computers and Advanced 
Telecommunications S\ stems, January 1979 

'*See U S Congres.s, Office of Technology Assessment, As- 
sessment of Radio Frequency Use and Management Impacts 
From the World Administrative Radio Conference of 1979, in 
progress 
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The concerns that have been expressed 
are not just focused on computer systems. 
They also cover such topics as international 
news-gathering, access to satellite commu- 
nication, the spilling of broadcasts over 
borders, and the exchange of scientific data. 
However, the fundamental attitudes and 



goals of the various nations as expressed in 
their negotiations over international in- 
formation policy will undoubtedly shape the 
laws and regulations under which interna- 
tional data systems will be operated in the 
future. 



Information Gap 



Some observers have suggested that the 
advent of information technology will widen 
the gulf between the haves and the have- 
nots in society. This view is based on relative 
differences in what might be called "informa- 
tion literacy/' the ability to use information 
technology to cope with everyday life. 

The technology itself is potentially highly 
flexible. Information systems can be de- 
signed to make the use of devices and serv- 
ices far easier than before, for example by 
providing access to people with language 
problems and physical handicaps. Research 
and development (R&D) in such subjects as 
computer speech, speech understanding, and 
pictorial display will continue to improve the 
potential accessibility of information tech- 
nology. 

Whether these capabilities will be used by 
a system designer is a different question. 
Making a computer system accessible often 
imposes added costs for hardware or for 
more computation. Therefore a concern for 
efficiency or economy, or the system design- 
er s biases or ignorance, can result in an in- 
formation system with unequal accessibility 
built into it. 16 

Should such an information gap develop, 
it could affect the citizenry in areas such as: 

• Employment: As automation pene- 
trates the workplace— both manufac- 

Milton K Wessei. freedom s Edt?e 7 he ( nmputer threat 
to Soaetx (Reading, Mass \<lcjisonA\ ?s\ V \ Publishing Cn 
19741 

'T Sterling, et al. Humanizing Information Systems A 
Report From Stanlev Houst* Cnmmunttattans of the U«i- 
natittn fur Computing \ttu hinery November IM71 no 
609-612 ' 



turing and white-collar— unemployment 
may result not so much from increased 
productivity as from the inability of ex- 
isting employees to adapt to the new 
technology. If projections about an 
evolving information society and econ- 
omy are correct (see ch. 5), information 
literacy could become an essential re- 
quirement for entering the labor 
market. 

• Relation with Government: To the 
extent that information technology 
stands between the citizen and a gov- 
ernmental obligation or service, a poten- 
tial barrier exists. Banks carried out ex- 
tensive studies with regard to consumer 
acceptance before undertaking the de- 
sign of ATM devices. Government 
agencies, on the other hand, because 
they do not have the same economic 
motivation, may not necessarily be very 
concerned about the acceptability of 
their systems. (Incentives to have such 
concern may need to be imposed by law, 
regulation, or executive policy.) In- 
dividuals who are technologically il- 
literate may be affected in several ways: 
—they may not exercise basic rights 

such as voting; 
—they may be at a serious disadvan- 
tage in legal proceedings, both crimi- 
nal and civil; and 
—they may find access to such needed 
services as welfare, health care, and 
educational benefits, barred or se- 
verely impeded. 

To the extent that information illiteracy is 
unevenly distributed among cultural or eco- 
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nomic groups, the consequences would fall 
disproportionately on the poor and dis- 
advantaged, in general. The gulf between the 
haves and the have-nots in society might not 



only be increased uut, due to such barriers as 
a more limited access to jobs, societal efforts 
to bridge that gulf would be frustrated 



Computer Software Protection 



As discussed in chf* r r 3 and later in 
chapter 13, the cost jmputer software 
has become a pacesetting factor in develop- 
ment o r new computer applications. Increas- 
ingly, computer hardware is being designed 
to fit the software. With the investment so 
high, the value of software research and 
development is even greater and the need for 
proprietary protection felt even more strong- 
ly. At the same time, however, there is a 
strong need for innovation in software R&D, 
the sharing of ideas, and breakthroughs 
among researchers. 

Copyright and patent protection are the 
traditional means for protecting the com- 
mercial value of information while providing 
for public disclosure. But the continuing 
uncertainty concerning copyright and pat- 
ent protection for computer software leads 
many software researchers to use the trade 
secret approach to protect their time and 
dollar investment. Private firms doing soft- 
ware R&D generally protect software trade 
secrets through employee nondisclosure 
agreements, restricted access measures, and 



by otherwise keeping the work confidential. 
This of course makes the sharing of informa- 
tion in the software R&D communitv quite 
difficult. 

The Copyright Act of 1976 specifies that 
computer programs are copyrightable as 
''literary works." But the extent of protec- 
tion defined under the act and more recent 
court decisions 17 have left the situation am- 
biguous. Amendments to the act were in- 
troduced and enacted in the 96th Congress 
as the "Computer Software Copyright Act of 
1980/ MH However, the issue of computer 
software protection appears sufficiently im- 
portant and unsettled to warrant continued 
congressional attention. l ) 



' Data (u^h S\^tt>ms hu \ JS&A (imup, hu , U S I) C , 
for Northern Illinois, St'pt 2U, 1979 

"H P 6934, Mar 26. 19M0, enacted as an amendment to 
H H 6933, "Government Patent Pohcv Act of 19H0, Public 
Law 96-.") 17, Dec 12, 19H0, and based on a recommendation of 
the National Commission on \ew Technological Ust\s of 
Copyrighted W orks. Final Report. Wa^hin^ton, P C , 1979 

'See "Court Broadens Rules on Patenting Software, 
SWiiiv. \ol 211, Mar 20. 19*1. pp 132"), ff 
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Chapter 13 

Trends in Computer Technology 



Introduction 



Computer technology is advancing rapid- 
ly, even explosively. To assess the ijnpacts 
of information systems, the current'state of 
this technology and where it is heading must 
be understood. The capability that informa- 
tion technology puts in the hands of the com- 
puter user determines the nature of the ap- 
plications that are developed. 

Developmental trends are already shaping 
the nature of the information-based services 
that will be provided in the coming decade. 
New services that make use of the growing 
integration of telecommunication and infor- 
mation technology are being designed and 
implemented; and both industry and Gov- 
ernment are looking at a wide range of inno- 
vative products and services that will be 
used by the in-home information system of 
the future. 

The nature of the technology as it evolves 
will also influence the structure of the in- 
dustry associated with it. Companies that 
specialized only in components are begin- 
ning to narket computer systems; com- 



panies that sold only general purpose com- 
puter systems are beginning to market con- 
sumer products that incorporate these 
systems. 

For the purposes of this study, emphasis 
has been placed on what information sys- 
tems can do rather than on the fundamental 
nature of electronic technology. Many in- 
teresting developments now in the labora- 
tory, such as Josephson junctions,* may not 
fundamentally change either the nature of 
the systems that are designed or the pur- 
poses to which they will be put, particularly 
over the next 10 years. Other developments, 
such as the microprocessor, are today revolu- 
tionizing the ways in which computers are 
used as well as the thinking about their 
potential social impacts. Overall, the an- 
ticipated changes from laboratory devel- 
opments over the next several years will be 
more of degree than of form. 

*A Josephson junction is a microscopic-size electronic 
lotfit device that operates at the temperature of liquid helium, 
ft is ver> fast and uses very little power 



Conclusions 



Several conclusions can be drawn from 
OTA's analysis of the trends in the develop- 
ment of computer technology over the next 
10 or 15 years. Spurred by both industrial 
and Government research and development 
(R&D) programs, information systems are 
undergoing a revolution that will be mani- 
fested by a proliferation of new products and 
services affecting all sectors of American 
society. 



Hardware 

• Computer electronics are experiencing an 
extraordinary drop in price, increase in 
power, and reduction in size. 

In 1977, the Privacy Protection Study 
Commission estimated that the cost of com- 
puting would drop by a factor of more than 
100 during the 20-year period from 1970 to 



ERIC 



123 



123 



124 • Computer Based Ndttonji information S\ stems Technology jna Public Policy issues 



1990. This means that the million dollar com- 
puter of the 1960s will cost less than a thou- 
sand dollars in the late 1980 s. 

Concomitantly, during this same period 
calculating speed is expected to increase a 
hundredfold. In 1970, the largest processors 
performed 10 million operations per second, 
today they perform 100 million, and by 1990 
there will be a processor that will perform 1 
billion. In addition to greater speed, new 
designs can also greatly increase the power 
of future computer systems. 

The large computer that occupied one or 
several rooms in the late 1960s will fit in a 
desk drawer by the late 1990 s, and a medi- 
um-size computer will fit in a briefcase or 
even a coat pocket. These trends do not nec- 
essarily mean that in all cases the costs of 
purchasing, programing, and operating a 
large computer application system will de- 
crease. Rather, more work will be done for 
the equivalent number of dollars. 

• There will be a great expansion in the 
number of computers being used in busi- 
ness, education, and the home. 

This effect is already being seen. The 
home computer boom, which was the first 
big stimulus for the computer retailing 
stores, has fallen off slightly, only to give 
way to a new marketing thrust aimed at 
small businesses. The hand calculator, which 
has become a ubiquitous tool, is already be- 
ing supplanted. A small hand-held computer 
is now available in the consumer market, and 
electronic calculators are being built into 
wristwatches. Computers are also being 
used as part of office automation. 

• Computers will be used as components in 
a wide range of consumer products, 

With the advent of an integrated circuit 
microprocessor that will sell in mass quan- 
tities for $1 or less, the use of the comouter 
for controlling everyday devices in the home 
and at work will become commonplace. Com- 
puters are already being used or designed to 
control such devices as clothes washers, sew- 
ing machines, hone thermostats, automobile 
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engines, sprinkler systems, typewriters, fil- 
ing systems, electric lights, and cash regis- 
ters. 

While many applications will involve 
simply substituting electronic for mechani- 
cal control, the increased "intelligence" in- 
corporated in the products will be used to 
provide such additional features as energy 
conservation or self-diagnosis of errors, and 
to give more flexible control to the user. 

• New products and services based on com- 
puter and telecommunication technology 
will become available. 

In addition to adding computer control to 
familiar products, the new computer technol- 
ogy will be used to provide a new range of 
products and services for the home and busi- 
ness. The video game and home computer 
are just the first of a long line of computer- 
based information products and services 
that will appear. (Electronic funds transfer 
and electronic mail, two examples of in- 
formation services, are examined in separate 
OTA reports.) 

• There will be a continuing, rapid increase 
in the power of very large computer sys- 
tems. 

Advances in speed, efficiency, and micro- 
electronics coupled with new design con- 
cepts will produce computers in the 1980's 
that are far more powerful than the biggest 
ones now available. This type of power is 
useful for a limited but important set of com- 
putational applications, e.g., improved sys- 
tems for weather prediction. Furthermore, 
systems that manage very large data bases 
require very powerful computer processors, 
particularly when sophisticated searches 
and analyses must be made. 

Software 

• Software technology is expanding steadi- 
ly, although not as rapidly as the hard- 
ware. 

Computer programs are sets of basic in- 
structions that tell the computer the steps to 
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take in doing a task. Programs can contain 
millions of instructions, and their design is 
as varied as the number of ways computers 
are used. While computer scientists have 
been successful in developing theoretical 
models of computer hardware logic, efforts 
to build an equivalent theory of programs 
have not been rewarding to date. Thus, de- 
veloping systematic techniques for creating, 
testing, and monitoring computer software 
has been a slow and tedious process. Some 
experts maintain that programing is still 
more of an art than a science. 

The continuing R&D on programing lan- 
guages and software engineering will pro- 
vide a flow of improved techniques and soft- 
ware tools, but the rate of improvement will 
not match the explosive growth in hardware 
capability. 

• New sottware techniques will allow com- 
puters to process a wider variety of data. 

Traditionally, computers have processed 
either numerical or alphabetic data struc- 
tured in very rigid formats. However, soft- 
ware for processing text, graphic images, 
and digitized voice is developing rapidly in 
addition to software for processing data 
alone. The result will be new families of prod- 
ucts and services affecting Government, in- 
dustry, and the citizen at home. 

• Software technology is the limiting factor 
in controlling the rate at which new ap- 
plications appear. 

The use of the new specialized hardware 
that is being designed is confined to very 
restricted purposes, or is merely putting ex- 
isting software ideas into hardware form for 
increased efficiency. The software basis for 
most new computer applications in the 
1980's exists now. There does not appear to 
be much likelihood that a new concept of 
computer design will change the way com- 
puters are used in the next decade. Rather, 
the changes will be in the scale of their use 
and in who will be using them, 

• The predominant cost of information sys- 
tems will be for the software; the infor- 



mation industry will become increasingly 
labor intensive. 

This conclusion follows directly from the 
last two statements coupled with the labor 
intensive nature of programing. This trend 
will influence the marketing practices of 
computer manufacturers, who will increas- 
ingly find profit in the sales of complete 
systems— combinations of hardware and 
software— rather than hardware by itself. 

• Software reliability, security, and audit- 
ability will improve slowly 

Large systems, because they are complex 
and cumbersome, tend to suffer from the 
kinds of reliability problems that are not 
solved by building more reliable hardware. 
The problems of assuring that a system is 
actually performing as intended and cannot 
be compromised, accidentally or deliberate- 
ly, are inherent in the complexity of software 
design. 

Furthermore, although computer software 
experts are improving their understanding 
of how to increase the reliability of pro- 
grams, they are unable to keep pace with the 
growth in the size and complexity of the 
systems being designed. Recently, system 
designers have become more aware of the 
need to design secure and auditable applica- 
tions, and users have become aware that 
they can demand such capabilities from the 
producers. Thus, although some improve- 
ment is taking place, substantial progress 
will depend on more R&D. 

• New data base techniques will allow 
massive data banks that serve multiple 
uses. 

Data bases will grow; some will contain 
trillions of units of information. At the same 
time, people will want to work with the data 
in more varied ways. Today, sophisticated 
programing is often required in order to han- 
dle efficiently each different type of query a 
user might want to make of the data base. 

However, researchers are developing 
methods to improve the efficient use of large 
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data bases and to make them serve multiple 
needs. This is being done through the devel- 
opment of more powerful query languages, 
new ways of organizing the data within the 
machine, and new hardware designs. 

Humaiy-Computer Interface 

People cojfamunicate with computers for 
three basic reasons: to describe the task to 
be done, to enter data for processing, and to 
derive results. Improvements in this tech- 
nology will result not only in less costly 
systems, but also in a vast expansion of in- 
formation systems capabilities and in their 
more efficient use. 

• There will be an increase in the direct use 
of computers by nonexperts. 

Improvements in programing languages 
will allow users to communicate more easily 
with the computer. Historically, programing 
and system control languages have been 
complicated and time-consuming to learn. 
They often require understanding how a 
computer operates. New, easy-to- learn but 
powerful languages will increase the number 
of people who will use computers directly 
without recourse to an intermediary expert. 
In addition, the proliferation of computer in- 
troductory courses in high schools will in- 
crease the number of people who have a basic 
knowledge of computer systems. 

This trend will allow many more simple 
applications to be developed by users in- 
dividually or in modest organizational set- 
tings. However, in larger organizations, or 
for applications that require integration with 
other systems, it will mean that much of the 
programing for modern small systems will 
be done by end users in industry and in the 
home who are not subject to control by cen- 
tral data processing management. This may 
lead to such problems as misuse, poorly 
functioning systems, cr incompatibility. 

• More data will be captured by computers 
and stored in machine-readable form. 

The distribution of computing power 
through the use of microprocessors linked 



together over communication lines will in- 
crease the amount of data captured at the 
source and stored in computer-readable 
form. Some types of information are cap- 
tured deliberately, as in the case of the com- 
puterized register in a retail store. Other 
types, which are captured only as a byprod- 
uct of automation, may be found to be useful 
enough to keep. For example, the system 
data collected by word processing systems 
may be considered useful by managers in 
monitoring secretarial efficiency. The pro- 
liferation of capturing such data may raise 
serious policy issues. 

• Output will be organized to present in- 
formation that is more directly useful to 
the user. 

It has been known from the earliest days 
of computing that the form in which the 
results of computations are presented can 
determine, in great part, whether it is actual- 
ly used or whether the answer being sought 
is found. Advances in both the hardware and 
programing for image display and speech are 
being brought out of the laboratory and into 
the commercial market. 

Research in information display is discov- 
ering how to filter significant information 
from insignificant data and present it to the 
user in the most efficient way. There is now a 
new, burgeoning interest in the use of color 
graphics display, a technology long consid- 
ered the domain of the computer research 
laboratory, but too expensive for general 
use. 

• There will be increased interface with in- 
formation .systems by consumers in their 
homes and employees in their offices. 

Many systems designed for entertain- 
ment, education, information retrieval, and 
computational services are beginning to be 
offered through a combination of evolving 
television sets and telephone instruments 
because of easy-to-use software, data banks, 
and the distribution medium provided by 
cable television (CATV). As a result, there is 
a possibility that society as a whole will be 
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substantially affected, but to what extent is 
presently unknown. 

Communication 

The rapidly increasing availability of 
inexpensive digital data communication 
through specialized networks such as Tele- 
net and Tymnet, coupled with the trend of 
manufacturers to design systems with elab- 
orate communication hardware and software 
built in, are motivating growth in the use of 
distributed, communication-based systems. 
New satellite-based data communication 
services will further stimulate this trend. 

• The use of distributed data bases and 
distributed processing will grow rapidly. 

Rather than centralizing data collection 
and processing as in the past, the most effi- 
cient procedure in the future will be to 
localize these functions at the point where 
the data are originally captured. Organiza- 
tions will have computational capacity dis- 



tributed among all of their offices. All 
computer-based devices, even word proces- 
sors, will be linked into the central system. 

The problems in managing such a distrib- 
uted system will be a major concern of large 
organizations. In particular, procedures for 
controlling access and for ensuring data 
quality will be more difficult in a distributed 
environment. However, dealing with them 
effectively will be crucial to the successful 
operation of communication-based systems. 

• There will be increased availability of com- 
puter services to the home and business 
over communication lines. 

Many homes will have small computers or 
computer terminals, and those that do not 
will likely contain telephones and television 
sets that have been equipped with computer 
control. All of these devices will provide 
links from the home and office to a multitude 
of information services provided over a vari- 
ety of communication channels such as tele- 
vision broadcast, telephone, or cable lines. 



Processors 



The 1970 s have seen continual dramatic 
improvements in the characteristics of the 
components from which computers are 
made. It is expected that this trend will con- 
tinue through the 1980's, with computing 
hardware becoming remarkably inexpensive 
and efficient. 

The decline in cost per logic function from 
1960 projected to 1990 is shown in figure 8. 
In 1960, the price of a logic gate ranged from 
$1 to $10 per unit, depending on speed. By 
1990, that price is expected to range from a 
few thousandths of a cent to a few tenths of 
a cent per gate. This continuing decline is 
based in large part on the dramatic increase 
in capability of semiconductor chips, as il- 
lustrated in figure 9. 

There has been a parallel increase in the 
speed of processing. In 1960, the fastest 
machine executed about 1 million instruc- 



tions per second. By 1990, there probably 
will be computers that will execute a billion 
or more instructions per second, a thousand- 
fold increase in speed. 

This combination of increased speed and 
decreased cost for logic components results 
in a steady decline in the cost of computa- 
tion. The drop in the costs of computing on 
IBM systems that are roughly equivalent, 
over the period 1952 through 1980, is shown 
in figure 10. 

These gains have all been due to progress 
in integrated circuit technology, the process 
by which electronic components are printed 
on small chips of silicon. Using these chips 
as components has resulted in a steady 
shrinkage of the size of computers from 
assemblages that filled several rooms to the 
current desk-top versions. Mass production 
techniques have replaced the hand-wiring of 
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Figure 8.— Projections of Logic Cost per Gate 
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Figure 9.— Increase in Capability of 
Semiconductor Chips From 1956 to 1980 
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Figure 10.— Drop in Average ComDUter System Cost 
per 100,000 Calculations From 1952 to 1980 
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a decade ago, speeding up the manufactur- 
ing phase. Energy consumption, both to 
operate the computer system directly and 
for the necessary system cooling, has 
dropped enormously. 

The financial implications of these latter 
trends are significant in that they are 
stimulating a rapid growth in computer ap- 
plications that will accelerate beyond their 
current high rate in the 1980 s. Facility costs 
have historically been a major expense to 
users installing computers. Now, many sys- 
tems take up only a desk top, require no spe- 
cialized environment control, and plug into a 
normal electrical wall socket. This flexibility 
means that many computer systems can be 
installed at any site, from the home to the 
business, with little or no added cost for 
preparing the physical site. 
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Inexpensive very large-scale integration 
(VLSI) based computer hardware will also 
lead to lower maintenance costs in the 
1980's. Maintenance currently is estimated 
to cost about 5 percent of the computer s 
purchase price per year for medium-size com- 
puters. The figure is higher for smaller 
machines. A reduction in these costs will 
result from lower failure rates, easier main- 
tenance by replacing larger modular units ot 
the system, and built-in hardware redun- 
dancy and tault diagnosis. 

Implications: These trends have several 
implications for computer hardware. In the 
first place, as illustrated in figure 10, there 
has been and will continue to be a steadv 
drop in the cost of computing on general pur- 
pose, medium- to large-scale computing s\s- 
tems 

Second, small inexpensive, personal desk- 
top computers have appeared on the market 
in the last few years. These ■ microcom- 
puters/' while modest by present standards, 
are quite powerful relative to the standards 
of only a decade or two ago. The price ot 
these systems will drop rapidly, and their 
capacity will grow over the next decade 
These small systems will likely drive the 
development of a true mass market for com- 
puters, a market analogous to the current 
one for hand calculators. 

In addition to making the microcomputer 
possible, the ability to mass-produce chips 
and to custom design them at the same time, 
using the automated production machines, 
means that there will be a proliferation of 
special-purpose computers that are custom- 
made for specific applications. One of the 
motivations for the development of the so- 
called "general purpose" computer was that 
a computer system was expensive and dif- 
ficult to design and build. Thus, many dif- 
ferent user markets had to be identified for a 
single design in order to provide a sufficient 
customer base to justify its production 

This view of the manufacturers was repro- 
duced in miniature within each computer 
center, which accumulated as many different 
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t>pes ot applications as possible in order to 
justify acquiring a large computing machine, 
and thereby benefit from economies of scale. 

These days, however, it is feasible to build 
special-purpose machines, because the spe- 
cialized markets have grown and because the 
cost of designing and marketing custom 
tailored systems has dropped. As an exam- 
ple, a variety of firms (some quite small) are 
marketing so-called "array processors," 
computers designed to calculate the solu- 
tions to systems of mathematical equations 
that display certain special characteristics. 
These processors are designed to be con- 
nected to a general purpose computer, and to 
be called on only for the specific calculations 
at which they excel In the jobs for which 
they are intended, these array processors, 
which cost about as much as a large com- 
puter, are hundreds of times more powerful 
than the biggest computers available. The 
market for this machine exemplifies the in- 
creasing ability of small firms to enter the 
computer hardware business and carve out a 
niche for themselves. 

Basic R&D in hardware design is picking 
up again after a hiatus. It moved out of the 
academic and pure research laboratory in the 
1960's due to the high costs of building hard- 
ware and the lack of enthusiasm for new de- 
sign concepts on the part of manufacturers. 
Now. the costs and feasibility of experimen- 
tal research have improved dramatically. 
The result should be a proliferation in the 
1980's of small specialized computers, tai- 
lored to particular needs. This trend will 
reduce computing costs even more than 
would result from the drop in component 
costs alone. 

In general, experts expect that a continu- 
ing trend will be seen toward modular com- 
puter architecture. Logical functions will be 
distributed over the entire system. The cen- 
tral processor will be a traffic director com 
trolling the flow of work among the various 
units. There will be specialized computation 
units like the array processor discussed 
above, file management processors for han- 
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dling data bases, communications control 
units, specialized language processors, and 
others. Because of widespread high-speed 
digital communications, these various com- 



ponents will not need to be in the same room 
or e/en the same city to be part of the 
sysiem. 



Information Storage 



A computer memory comes in a wide vari- 
ety of sizes, speeds, and types. Any par- 
ticular system uses an assortment of 
memories to support its operation. Its most 
significant design characteristics are 
retrieval time and capacity. 

Retrieval time is the time it takes to get a 
segment of information from the memory. 
The technology currently available provides 
a range of times from 1 nanosecond (1 
billionth of a second) to a minute or more. 
Retrieval time includes the time both to find 
and to read the information. 

Capacity is the amount of information 
that can be stored conveniently and eco- 



nomically. It is measured in bits (the 
smallest fundamental unit of information), 
or bytes, an 8-bit grouping roughly equiv- 
alent in information content to a single 
alphabetic character or two numerical digits. 

There is a distinct tradeoff between speed 
and capacity. Therefore, in connecting a 
computer that performs millions of instruc- 
tions in a second with a world that operates 
in a much slower timeframe, a hierarchy of 
memory types is used. The current selection 
of memory technology available to system 
designers is shown in figure 1 1, and the pro- 
jected drop in cost for information storage 
through 1990 is shown in figure 12. 



Figure 11.— Cost and Access Time of Memory Technologies 
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Figure 12.— Projector * fo Memory Cost 
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There are two other important character- 
istics of various memory systems that affect 
their use in particular applications. These 
are volatility and writability. 

Volatility refers to the long-term stability 
of the memory. Many storage systems lose 
the information they contain when the power 
source is removed or interrupted. Others 
keep the information indefinitely until it is 
changed. 

Writability refers to the ability to insert 
information in the memory. Memory is clas- 
sified as read/write or read only, depending 
on whether or not the computer can copy 
new data back into the storage in about the 
same time scale as information can be read. 
Read only memories are written once and the 
recording is permanent. In this discussion, 
memory is roughly categorized as fast in- 
termediate. and mass storage. 



Fast Memory Storage 

Fast memory storage constitutes the up- 
per left-hand group in figure 11. It is the 
most closely connected to the processor, and 
hence its speed must be consistent with that 
of the computer hardware. Because of the 
relatively high cost of fast memory, it is 
usually the smallest memory in the system. 

For many years, core memories based on 
the magnetic properties of an iron compound 
were the principal technology used for fast 
memory storage. However, this technology 
seems to have reached its limit in cost, 
speed, and size. Most new memories now are 
designed around VLSI semiconductor tech- 
nology. 

Intermediate Memory Storage 

Intermediate memory storage, which is 
reasonably fast but inexpensive enough to 
be used in large quantities, serves as a buffer 
between the high-speed semiconductor mem, 
ory and tht very slow mass storage devices. 
In the long term, bubble memory may 
develop into the technology of choice for in- 
termediate memory storage. Information is 
stored as tiny magnetic domains that circu- 
late along a printed track in a semiconductor 
medium. Some bubble memory pocucts are 
already on the market, and new improved 
ones are being announced continually. 

One of the advantages of bubble memories 
is that the domains are stable. Therefore, 
when a bubble memory is used in a terminal, 
for example, data can be entered and stored 
in it for later transmission without needing 
to keep the terminal hooked up continuously 
to a power supoly. Thp technology of bubble 
memories is progressing rapidly. One manu- 
facturer has already announced plans to 
market a million-bit chip that will cost 
around $2,000 in small quantities. 

High-speed magnetic disks are still widely 
used for intermediate memory, and will con- 
tinue to be the most important technology 
for this decade. Steady improvements will be 
announced throughout the 1980s. Some ex- 
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perts predict that disks will eventually be 
used in a more finely stratified memory 
hierarchy, rather than being replaced by 
bubble memories. This may depend on 
whether progress in expanding the capacity 
of bubble memories continues as rapidly as it 
has. 



Mass Memory Storage 

Progress seems to be slower in the area of 
very large storage devices. No radically new 
technology has appeared that seems to 
promise any breakthroughs. Magnetic tape 
will continue to be used heavily over the next 
decade. 

Many new mass storage technologies— 
e.g., video disk— are difficult and expensive 
to write, but very cheap and easy to re- 
produce and read. Erasing and rewriting are 
often impossible. Costs per bit of storage for 
archival applications are low enough to be 
competitive with paper storage. Incremental 
improvements over the next decade should 
strengthen this advantage and stimulate a 
trend toward permanent document storage 
in electronic form. 



Inexpensive Mass Storage 

The rising market for small inexpensive 
computer systems is producing a demand for 
small, very cheap, bulk storage technology. 
The technology is different frcm that pro- 
vided for large systems. The size of bulk 
storage needed is less, and there is more 
tolerance for slow search times. Currently, 
personal computers are supported by two 
types of bulk storage, magnetic tape cas- 
settes and "floppy " disks. 

Tape readers are very cheap, as is the tape 
itself However, read time is quite slow, even 
by personal computer standards. Floppy 
disk hardware is more expensive, although 
still within the requisite price range. The 
disks themselves are cheap and easily 
stored. 

Some manufacturers, particularly those 
marketing computer games, sell programs 
permanently written on solid-state read only 
memories (ROM). While relatively expensive 
cts a medium, ROM has the advantage of be- 
ing difficult to copy, thus discouraging the 
pirating of software. The ROM approach has 
not been well accepted by the marketplace, 
however. ^ 



Software 



Computer software is also a form of 
technology. Although it is not a tangible 
product like a piece of hardware, software 
shares many of the same characteristics. 
Much R&D carried out by computer scien- 
tists concern software problems. It often 
results in new concepts and basic techniques 
for organizing data and sequencing instruc- 
tions to enable a computer to accomplish a 
particular task. 

Very large programs are harder to ana- 
lyze, design, and produce than are equally 
large machines that run them. Consequent- 
ly, the state-of-the-art in software lags 
behind that of hardware. 



Occasionally, a major breakthrough in 
programing can motivate new machine de- 
signs. For example, a wave of new small 
processors has appeared on the market to 
support signal processing applications. 
These processors are based on the "fast 
Fourier transform" algorithm, an important 
discovery made a few years ago that allowed 
the solutions to certain types of mathemati- 
cal computations to be calculated 10 times 
faster than previously.* Even greater speeds 

*The Fourier transform itself is a pre 20th icntun mathe- 
matical technique The ad\ ami" was a new wa\ to perform 
the numerous ami ttdum** computations the technique re 
quires 
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have been achieved by using special proces- 
sors to take advantage of this algorithm. 

Limits 

One area of resea ch that will affect soft- 
ware development in the 1980 s is fundamen- 
tal research in computational complexity. 
Until recently, fundamental theory in com- 
puter science was concerned with computa- 
bility — whether a computer could calculate 
an answer to a problem. However, the class 
of problems that the computer could theo- 
retically solve was enormous. Mor^ recently, 
researchers have been exploring the more 
practical questions of how easily a problem 
may be solved, how fast, and how much com- 
puter power would be required. The answers 
have been surprising. Many categories of 
problems have been found to be almost im- 
possible to solve, that is, the best program 
possible on the fastest computer available 
would take many years, even millions of 
years, to calculate an answer. Such results 
have already had practical application. For 
example, they have led to the development 
of new types of cryptographic codes with in- 
teresting new properties. Future research 
may lead to the ability to calculate theo- 
retically the breakability of a code. 

Over the next decade of ever increasing 
computer power, some types of problems are 
likely to remain intractable. Complexity 
theory will help improve the understanding 
of these limits of computers as they are now 
designed. Furthermore, it may possibly 
motivate some radical new concepts in com- 
puter design. 

Data Base Systems 

There is a trend toward the use of large in- 
tegrated data base systems that support 
multiple applications. Researchers have 
been developing methods for organizing data 
so that it can be accessed in many ways, not 
all of which may be predicted when the sys- 
tem is designed. Some of the most general 
data structures, such as relational data 
bases, are not as yet efficient for very large 
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data bases, but are appearing in commercial 
products for use with medium-sized sys- 
tems. New developments in data handling 
algorithms, and new hardware designs spe- 
cifically tailored to the support of data ac- 
cess systems, should provide continually im- 
proving capabilities during the 1980 s. 

Improved query languages will allow the 
information user to interact directly with the 
computer to obtain the needed data. The in- 
tegration of better report generators* with 
the data base system will allow the output to 
be produced in a more directly usable form. 
These advances will provide the system user 
with access to the data base which is much 
more direct than is now the case. Currently, 
the normal practice is to work through an in- 
termediary, both to frame the initial inquiry 
and to interpret the results. 

The capability to transfer information be- 
tween data bases over communication net- 
works Will also be improved. This capability, 
alieady well-developed in some specific sys- 
tems, will allow more general exchange 
among systems connected to commercial 
data networks. Standard protocols and 
forms will be agreed on. True distributed 
data bases are systems in which the location 
of any particular item of information in the 
data base may be anywhere in a national or 
even international network, and in which ac- 
cess to that data is handled totally by the 
system. These should start to appear com- 
mercially in the 1980 V 

The increasing size of data bases, the 
multiplicity of their uses, the wider remote 
access to them, and their integration over 
telecommunication lines will all present 
problems in preserving the security and in- 
tegrity of the information. It will be more 
challenging to protect the privacy of per- 
sonal data or the security of economically 
valuable information on such distributed 
systems. 



*Kpp»rt gcnwutfiri rotrirw information nmled b> a man- 
ager, perform moderate tabulations tin it, and organize it in a 
readable and usable form 
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Languages 

Languages are the means by which users 
describe to the computer the kinds of opera- 
tions they want performed by the system. 
Machine language is the set of instructions 
that is wired into the computer. Although 
some machine language programing is still 
done, it is very difficult and inefficient to use 
due to the size and complexity of most appli- 
cations. Modern systems on a medium-sized 
computer may contain more than a million 
machine language instructions. 

Faced with these difficulties, programers 
turn to a higher level language to write most 
software. As computers have grown larger 
and more complex, and as the tasks de- 
manded of m become more complicated, 
. here has been a continual trend toward the 
use of languages designed to be more rep- 
resentative of the way humans express prob- 
lem-solving procedures. 

In addition to increasing programing effi- 
ciency, developers of high r level languages 
hav v -,ther goals. Some special languages are 
tailored to produce e Mc'^nt codes for par- 
ticular classes of applications. Others have 
been developed basad on the perception that 
programing a computer is a form of mental 
problem-solving, and that the language as 
the vehicle for that effort is an intellectual 
tool that can directly help thought proc- 
esses. Finally, there has been a trend to de- 
velop languages that integrate users more 
closely with the system, thus lowering the 
degree of expertise required to program the 
con puter. By programing in these user 
orif nted languages, persons who are not 
co* lputer specialists can interact directly 
wi ,h a system rather than through a profes- 
\ sii nal programer intermediary. 

The rapid expansion in the use of large 
data base systems that serve many users 
over communication networks is driving a 
major development effort in query lan- 
guages. They are the means by which a user 
gains access to a data base, describes the 
desired information and specifies the format 
in which it is to be presented. 



A principal driving force toward further 
language development is economics. Hard- 
ware costs are decreasing while labor costs 
are increasing. Developing languages that 
will increase the productivity of programers 
has become a high priority. Ultimately, some 
researchers envision automatic programing 
in which users specify the problem to be 
solved in a language close to that used in 
their environment— engineering, law, medi- 
cine, and so on. The computer, using this 
problem statement, would write its own pro- 
gram. 

Full development of such automatic pro- 
graming systems is far in the future, al- 
though simple systems for preparing man- 
agement reports and models derived from 
data bases are already in use. More short- 
term effort is being concentrated on de- 
veloping tools that help the programer use 
the computer as an active agent assisting in 
the creation of a system. 

Progress is expected to be slow. It will be 
impeded by the sheer difficulty of matching 
the esse.itial amliguity of human thought 
and language with the absolute rigidity of 
computer^ language. It is also economically 
difficult to implement radical new languages 
that require substantial retraining of pro- 
gramers. Finally, there is a reluctance to 
write programs in languages that are not 
widely used and known, for the usefulness of 
a program so written may be unnecessarily 
restricted. 

Software Engineering 

For most of the history of computers, pro- 
graming has been considered an art rather 
than a form of controlled design. Emphasis 
was on the ingenuity id elegance of the 
product, rather than on more mundane 
measures of utility. Creativity will always 
have a place in good programing, but its em- 
phasis conflicts with managerial imperatives 
for economy, control, and predictability. In 
particular, when the development of a major 
system requires the coordination of hun- 
dreds of programers writing millions of lines 
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of code, the project must be managed in such 
a way as to guarantee a usable product, on 
time, and at a reasonable cost. 

The relatively new discipline of software 
engineering has been attempting the dif- 
ficult task of developing techniques both for 
programing and for managing the program- 
ing of large software systems. The operating 
system and support software of a large 
multiprocessor computer system is extraor- 
dinarily complex. However, the economic im- 
perative will force work in this area and 
assure the quick adoption of new results. 



Until the present time, efforts have been 
geared to developing both techniques for 
breaking a large proposed system into suc- 
cessively smaller logical subunits that can be 
assigned to programing teams, and ways in 
which to manage the work of the programmers 
and the communications among them. These 
and related techniques will gradually become 
commonplace over the next 5 to 10 years as 
they are learned by the next generation of 
programing professionals and managers. 



Input-Output Technology 



The principal means of communication 
with a computer has traditionally been 
through a form of typed input and alpha- 
numeric printed output. Although this type 
of communication will continue to dominate 
in the near future, it is inadequate for many 
new applications. Advances in technology 
for human-computer interaction will change 
the way in which computers are used by 
many people. 



Graphics 

Graphical display of information is be- 
coming more economically viable, and the 
technology, both hardware and software, is 
improving in its capability. In the last few 
years, researchers have developed efficient 
techniques for removing hidden lines in 
order to display solid objects and for combin- 
ing half-tone, shaded image production with 
color. Some current research is focused on 
developing techniques that model various 
surface reflectivities and textures with re- 
spect to different types of light sources. 

While work is proceeding on improving 
the speed of graphical computations to allow 
the terminal to display very high resolution 
pictures fast enough to depict motion, such a 
capability may remain very expensive over 



the next few years for any but the most sim- 
ple types of pictures. 

Sharp cost breaks are expected for dis- 
plays with lower image quality. The use of 
bit-mapped frame buffers, which store slow 
computer graphics output and play it back 
at normal speed over a display terminal, will 
grow as the costs of memories drop. 

Some research is being pursued on holo- 
graphic output of three-dimensional images. 
However, holographic display is not ex- 
pected to become widely used in the next 
decade. 

Computer graphics technology is already 
finding widespread commercial use for 
creating animated films. It competes favor- 
:*blv with traditional manual techniques. The 
useb .ange from pure and commercial art to 
the production of educational films. Com- 
puter languages and graphics software have 
been developed to allow artists and de- 
signers to interact directly with the com- 
puter, generally through the display screen, 
to create their images. 

In computer-aided design, the user is in- 
teractively coupled to a display screen with a 
graphical data base and analytical programs 
stored on a computer. Designers use the 
computer and the display to develop their 
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designs on a screen. For example, an ar- 
chitect designing a building on the graphics 
display can have an instantaneous computa- 
tion of cost, and a civil engineer can do stress 
calculations while designing a bridge. Com- 
puter-aided design has emerged from its in- 
fancy. Steady improvements in software and 
decreasing computing costs will likely make 
it the methodology of choice for most engi- 
neering design in the 198C's. Kven today, in- 
tegrated circuits and printed circuit boards 
are preferentially designed by these tech- 
niques. 

Graphical output of computer data can 
transmit information that is difficult or even 
impossible to derive from a printout list of 
numbers. Whether calculating stresses in an 
airplane wing, the water flow in a flood plain, 
or the molecular structure of an enzyme, the 
numerical output of the computer calcula- 
tions must be translated into a picture 
before any sense can be made from the 
results. 

Voice Communication 

Voice communication with computers is 
on the verge of becoming commercially suc- 
cessful. The advances have been both in 
developing better and cheaper computa- 
tional techniques for generating and rec- 
ognizing speech and in learning more about 
the ways in which such systems could be 
used. This new understanding has lowered 
the estimates of what would constitute a 
commercially useful level of performance. 
Capabilities far short of a human level of per- 
formance can markedly enhance communica- 
tion between human and computer. Some ex- 
perts even expect a voice-driven typewriter 
to be on the market before the end of the 
decade. 

There are two basic problems in speech 
synthesis first, creating a voice tone carry- ^ 
ing a phoneme (a fundamental linguistic ele- 
ment of speech), and second, stringing these 
phonemes together to make a sentence or 
phrase. Although neither problem has been 
solved to the ultimate 1 point of producing 



natural human sounding sentences, the tech- 
nology is improving rapidly. It has already 
reached the point of commercial utility. 

Several companies sell chips in the $10 
range to synthesize speech sounds. Texas 
Instruments offers a mass-produced elec- 
tronic toy. Speak and Spell 8 t to help chil- 
dren learn to spell. 

One important application of speech is a 
reader for use by the blind that converts 
typed text into spoken words. While current- 
ly very expensive, these devices should be- 
come more economical in the near future. 

Speech recognition is a more difficult 
problem, since the system must d°al with an 
input having great variability. The voice and 
style of speech varies widely among indi- 
viduals; the computer recognizer is poten- 
tially confronted by a wider array of poten- 
tial vocabulary to identify; and it must 
analyze a multiplicity of grammatical struc- 
tures. Again, entrepreneurs have found that 
even the very limited capabilities now possi- 
ble are marketable. 

So-called "continuous speech" recogni- 
tion, understanding natural speech, is still in 
the research laboratory. While large-scale 
commercial systems are not expected in the 
short term, the strong market already de- 
veloping for limited range speech recogni- 
tion systems will motivate R&D and en- 
courage the rapid commercialization of re- 
search results as they appear. 

The best performance to date in a research 
laboratory environment has been shown by a 
system that can recognize sentences 91 per- 
cent of the time from multiple speakers 
using a vocabulary of 1,01 1 words. Major re- 
search efforts are proceeding at IBM and at 
a few university laboratories. Commercial 
devices with small vocabularies are now 
being marketed. 

Image Recognition 

Image recognition present* another form 
of the problem of recognizing patterns of 
data. The state-of-the-art is at a similar 



point. Simple self-contained patterns not in a 
confusing context can be recognized. De- 
vices on the market read standard type- 
writer and even handprinted characters. 
Point-of-sale scanners in stores read and rec- 
ognize the universal product code on pack- 
ages drawn across the unit at various speeds 
and orientations. However, analyzing a more 
general picture for a variety of elements is a 
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more complicated task, one which, like 
speech, may depend upon some "under- 
standing" of the context of the pattern. 

Slow but steady advances in pattern rec- 
ognition technology are occurring. The sharp 
drop in cost for the requisite technology is 
increasing the range of potential applica- 
tions. . 



Data Communication 



The ability to move data quickly over long 
distances through the use of new digital 
communication technology has had a sig- 
nificant impact on the design and use of in- 
formation processing systems. Designers 
now have the opportunity to build systems 
with greater power than was previously pos- 
sible, enhancing tneir ability to process in- 
formation and provide it to the user in a 
timely manner More importantly, however, 
telecommunication has brought the user 
closer to the computer by aiiowing direct 
interaction with the processing system. As a 
result, the use of information processing 
technology has become an integral part of 
the day-to-day work of many organizations 
whose operations have become totally de- 
pendent on a computer system 

Only technology that relates directly to 
the development of computer-based informa- 
tion systems is discussed here. (For a de- 
tailed analysis of communication tech- 
nology, see the OTA assessment report en- 
titled, An Assessment of Telecommunica- 
tion Technology and Public Policy. 

Digital ( ommunication 
Technology 

The steady improvement of telecom- 
munication service over the last quarter cen- 
tury has benefited the design oT computer 
systems by decreasing their Tost and im- 
proving their reliability. Significant applica- 
tions using communications date back to the 
early 1960s. However, the cost and com- 



plexity of putting together a communi- 
cation-based computer system restricted its 
use to applications, such as reservation 
systems, that had an inherent need for re- 
mote data entry and display. 

Existing communication carriers and new 
enterprises are beginning to offer new data 
communication services. These services are 
designed to provide inexpensive high-speed 
communication capacity specifically design- 
ed for use by computer systems. With these 
new services available, a host of new com- 
munication-based applications will appear 
over the next decade. 

Traditional communication systems have 
been tailored to carrying voice. The char- 
acteristics of voice communication are quite 
different from those of data communication 
between computers or between computers 
and people. The voice telephone network, 
through switching, provides a temporary 
line connecting two users. The charges are 
based on the length of the line provided and 
the length of time it is made available. 

Data communication tends to come in 
very high-speed bursts, with long periods of 
silence between transmissions. To perform 
this type of communication on a traditional 
telephone network is inefficient, as the line is 
unused for most of the time. One approach 
has been to design a network with multiple 
path connections. Packets of information, 
along with a destination address, are sent 
over any instantaneously available path, and 
the user is charged for the quantity of in* 
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formation transmitted and for the connec- 
tion with the network. One payoff in sharing 
traffic from a larger community to obtain 
better line usage is lower user costs. Sec- 
ondary benefits include error-free per- 
formance and higher reliability. This type of 
communication facility *s called packet 
switching, and is available as a commercial 
service. Thus, a librarian in Washington, 
D.C., with a terminal can dial a local number 
to access the Washington entry to a national 
data communication network. Through that 
network, the librarian can access a 
bibliographic data base in Los Angeles, and 
do scat a low cost. 

Digital Communication as 
Part of the System 

Viewed in the context of computer system 
operations, data communications are no dif- 
ferent from any other application. However, 
they do introduce new capabilities and prob- 
lems to the design, implementation, and op- 
eration of information systems. 



Early implementations of the data com- 
munication programs were designed to take 
advantage of processor cycles that could not 
be used productively by other applications. 
However, the growth in the communication 
workload, combined with other new tasks 
that may have been loaded onto the proc- 
essor, can saturate it and create a need to 
move the communication management from 
the central computer to a peripheral proc- 
essor. 

Fully programable front-end processors 
support the trend of moving communication 
processing away from the central computer. 
In some cases these devices have been spe- 
cifically designed for communication proc- 
essing. In other cases, general purpose mini- 
computers are being used as front ends. 
Either way, the availability of inexpensive 
logic and memory components has contrib- 
uted to the further distribution of the com- 
munication function away from the central 
processor. 



Security Capabilities 



Computers have handled sensitive data 
and programs for many years; however, it is 
only recently that the need to secure them 
has become a serious concern to system 
designers and operators. During the social 
unrest of the 1960's, concern arose over the 
physical security of computer systems. They 
were expensive and visible symbols and, con- 
sequently, attractive targets for sabotage. 
Later, concerns over privacy and an aware- 
ness of increasing incidents of financial com- 
puter crime motivated the managers to take 
a more sophisticated look at protecting their 
systems and data. 

Classifications of Computer 
Security 

Security experts distinguish between 
three types of security: physical, procedural 
and technical. 



Physical security refers to techniques that 
physically isolate a computer system from 
access by unauthorized persons. It also in- 
cludes protection of the facility from exter- 
nal dangers such as earthquake, fire, flood, 
or power failure. 

Procedural security is the set of rules by 
which a system operator manages the sys- 
tem personnel and the flow of work in the or- 
ganization. It can include such measures as 
preemployment screening of staff, work 
assignments that minimize opportunities to 
act in inappropriate ways, auditing pro- 
cedures, and controls on the flow of work 
through the system. 

Technical security refers to the software 
and hardware controls set up within the sys- 
tem itself. Techniques used to provide 
security may include cryptographic en- 
coding of data, complicated access and iden- 
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tification procedures, and hardware which is 
dedicated to the auditing function. 

Some security experts claim that too 
much attention on technological fixes has 
distracted system operators from more 
traditional but effective measures they could 
be instituting. However, the increased pro- 
liferation of small systems and the trend 
toward communication-based systems are 
making technical security more important. 
The techniques of physical and procedural 
security are well-understood and translate 
relatively easily from the noncomputer 
world into that of the system operator. Tech- 
nical security, a newer area of research, is 
less understood, but is related directly to the 
problems of system design. 

Computer scientists have proved that it is 
theoretically impossible to achieve perfect 
security inside the program itself. That is, it 
cannot be demonstrated that any particular 
combination of hardware and programing is 
proof against some new unexpected type of 
attack. Improving the security of a com* 
puter systerr nvolves balancing the costs of 
protection against the expectation of loss 
resulting from the threats and vulner- 
abilities. While it cannot provide a final 
answer, R&D in the field of computer secu- 
rity can substantially decrease protection 
costs! 

Risk analysis, the process of weighing all 
these factors in a decision model, is a dif- 
ficult job. The precise factors are unknown, 
and it is difficult to determine whether ali 
possible alternatives have been covered. Re- 
search can develop techniques for perform- 
ing risk analyses with greater precision, and 
the Government has new research and 
standards activities in this area. While the 
standards are directed at Federal systems, 
they will provide useful guidance to the pri- 
vate sector. 

Technological instruments for security 
fall into three categories, according to the in- 
tent of the designer: prevention, detection, 
and auditing. Prevention means keeping 
unauthorized persons from having access to 
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the system, and keeping authorized persons 
from using the system wrongly. Detection 
means catching an unauthorized procedure 
when it is attempted and preventing its com- 
pletion. Auditing means the determination 
of whether unauthorized acts have occurred. 
A particular security technique is usually di- 
rected toward one of these goals. 

Specific Techniques of Security 

Authentication: The first objective of 
security is to assure that only authorized 
personnel can access the system. Identifica- 
tion is the process of establishing a claim of 
identity to the system, either with a name or 
an account number. Authentication is the 
process of verifying the claim. 

The simplest and oldest procedure is to 
use a password or number that is known 
only to the individual authorized to use the 
system. The personal identification numbers 
assigned to bank customers for use on 
ATMs are examples of such codes. 

The security provided by password 
schemes is limited, although more elaborate 
versions offering some improvements have 
been developed. However, the security of 
any password scheme depends fundamen- 
tally on the ability and willingness of the 
usei to keep the code secret. 

Physical identification techniques, which 
depend on measuring certain personal phys- 
ical characteristics, are being developed ior 
use as authenticators in computer system 
access. To be useful, any such system must 
be able to discriminate between persons, but 
at the same time be insensitive to changes in 
the characteristics of a particular individual 
over time. 

The system operator, when selecting an 
authenticating technology, has to make a 
choice in balancing two types of errors- 
classifying a fraudulent identity as correct 
(type I) and classifying a proper user as 
fraudulent (type II). These two types of 
errors have costs associated with them, and 
are usually at opposite ends of a tradeoff 
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curve for any specific technology, The type I 
error can be minimized only at the cost of 
maximizing the type II error, and vice versa. 

Fingerprints: The technology exists for 
reading and encoding fingerprints with mini- 
mum delay, but the devices are expensive 
(over $50,000). Although the pattern is com- 
plex, fingerprints can be encoded in a com- 
puter using less than 100 characters by stor- 
ing on\j certain key data points. This stor- 
age efficiency means that a complete set of 
fingerprints for every person in the United 
States could be stored easily in a com- 
mercially available bulk memory. 

The cost of directly reading fingerprints, 
however, seems to suggest that it will not 
become a widely used method of authentica- 
tion, at least in the near future. Its use will 
be restricted to very high security require- 
ments, and to applications where finger- 
prints themselves represent significant data, 
such as in police work. 

Hand Geometry: A new and surprisingly 
effective form of physical identification is 
the geometry of the hand. Individual finger 
lengths vary from one person to another. 
This variance is sufficiently significant and 
unique to be the basis for ^relatively inex- 
pensive (around $3,000> identification de- 
vice. It is based on the use of a high intensity 
light shining ona^>attern of photocells. It is 
sensitive bq£h" to external geometry and to 
the transjticence of the flesh near the finger- 
tips. Jlios, it is quite difficult to deceive it 
with any artificial device. 

Voice Recognition: Research on the tech- 
niques for voice analysis and voice synthesis 
has resulted in methods for distinguishing 
individuals by their speech. In these sys- 
tems, a rai.dom list of words is shown to the 
individual, who then speaks them into a 
microphone. By having the computer gen- 
erate a new list each time, the system makes 
it impossible for an imposter to use a tape 
recorder to fool the system. 

The system has high interpersonal dis- 
crimination, but seems to be weaker on 
intrapersonal differences. It may reject 



authorized persons suffering from colds, 
hoarseness, or even emotional tension. 

Voice recognition systems are not yet 
commercially available, although at least one 
firm, Texas Instruments, has installed a 
home-developed system f or use in their 
facilities. 

Since information collection is relatively 
cheap, requiring only a standard micro- 
phone, amplification, and signal conversion 
hardware, the limitations of the technology 
seem to be in the computational techniques. 
As software improves, and as the cost of 
computer hardware drops, voice recognition 
could become a popular low-cost authentica- 
tion technique. 

Signature Verification: Passive signature 
verification uses pattern-recognition tech- 
niques to analyze and encode a signature on 
a check or form. It is a difficult task, because 
a signature can vary depending on an indi- 
vidual's mental and physical state, the type 
of writing ifiiplement used, and because 
forgers can be quite skillful. One company 
has announced a product for providing pas- 
sive signature verification for bulk applica- 
tion, particularly the processing of checks. It 
is not clear whether such technology is 
operationally effective in identifying for- 
geries, and whether ;L could be reduced in 
cost sufficiently to be used at the point of 
sale. 

Dynamic signature verification systems 
track the actual path of the pen point as the 
individual creates a signature. Sensitive in- 
struments measure variables such as the 
pen s speed and acceleration, the amount of 
time the point remains on the paper, and the 
changing pressure on the point. Several 
organizations, including IBM, are working 
on dynamic identification; however, no prod- 
ucts are as yet commercially available. Some 
experts judge this to be a promising tech- 
nology. 

Much R&D is aimed at finding a more 
reliable substitute for the currently used 
magnetic cards and passwords to identify 
and authenticate individuals. To date only a 
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few products have come on the market, and 
those have been designed for use in applica- 
tions with very high security requirements. 
The cost limitation seems to depend on the 
characteristics of the sensor, since the 
microprocessor costs have dropped so low. 
No doubt a growing demand could motivate 
a flurry of new products in the early 1980's. 

The amount of data required to store com- 
puter representation of the pattern for any 
of these Candidate technologies is relatively 
small— a few hundred characters. Thus any 
of them, if they become widely implemented, 
could become the basis for a quasi-universal 
identification code used by all private and 
Government organizations. 

Encryption 

In the past, cryptography was principally 
a tool for military and diplomatic com- 
munication. Now, however, modern data 
communication systems increasingly are 
transmitting private information of high 
value, and the need to protect these com- 
munications from interception and manip- 
ulation has prompted an explosion of in- 
terest in civilian encryption. 

A standard for encryption technology, the 
Data Encryption Standard (DES), has been 
established by the National Bureau of 
Standards for Federal use. It is apparently 
also being widely adopted in the private sec- 
tor, since several commercial manufacturers 
are producing devices based on it. While 
some experts have questioned the robust- 
ness of DES, it sefcms to have been accepted 
generally as an inexpensive technology that 
is at least r ffective for low- or middle-level 
security needs. 

Another set of techniques that has re- 
ceived some attention lately has been labeled 
"public key" encryption. "The idea behind 
these codes arose from basic research in com- 
putational complexity, a field of computer 
science dealing with possible theoretical 
limits on the ability of even the most power- 
ful computers to compute certain mathe- 
matical solutions. A public key code uses one 



key to encrypt and another to decrypt a 
message. Knowledge of the encryption key is 
no help in deriving the decryption key, even 
though their mathematical relationship is 
known. Thus, the security of the code does 
not depend on the security of either the en- 
coding key or of the secrecy of the mathe- 
matical relationships. Since one of the major 
problems in the use of cryptography is con- 
trol of the key itself, a system in which the 
decoding key need not be known even to the 
data sender is promising for many applica- 
tions. 

Public key codes also promise to be useful 
in electronic message systems, since they 
can be used for authenticating messages in 
the absence of signatures. Several applica- 
tions of this sort have been proposed. How- 
ever, public key codes are in their infancy, 
and it is not known with certainty whether 
unanticipated problems will arise as they are 
used. 

Encryption has uses other than merely 
securing communications. Used internally in 
a computer system, it can isolate sets of data 
from unauthorized users. It can also allow 
users to enter data but not to read it, or to 
read but not modify data. It can even sep- 
arate the activities of various connected 
computer processors. 

Authorization 

Most large-scale information systems are 
designed to serve several users simul- 
taneously. The data bases in the machine 
often contain clusters of information that 
serve multiple needs. It is necessary, then, to 
control the access of users who are author- 
ized to be on the machine, but may not be 
authorized to have access to specific parts of 
the data. 

For each user, the system must keep track 
of whifch parts of the file can be accessed and 
manipulated and what forms of access are 
held (road the data, enter new data, and so 
on). The system also must control the giving 
of permissions. Can one user, who is au- 
thorized to see a file, give access permission 
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to another user? There are many situations 
in which this is a legitimate and even nec- 
essary procedure, yet it complicates enor- 
mously the problems of access control. Re- 
searchers are developing ways to model 
these assignments mathematically and 
avoid unexpected loopholes in system access 
control. 

The continued growth in the size of in- 
formation systems and in the numbers of 
people allowed to access them will continue 
to put pressure on system designers by com- 
plicating the authorization process. 

^ Logging 

Logging is the process of auditing the ac- 
cesses made to a data base by all users. Sys- 
tems for keeping a complete or partial record 
of all access to the data have received more 
attention since privacy has become an issue. 
The system operator needs to account for all 
accesses made to files of personal data. Since 
the log itself is a file that contains potential- 
ly sensitive personal information, the need to 
protect it may be even greater than that for 
the original data base. For this reason, some 
experts suggest the use of a separate small 
machine to monitor accesses to the data 
base. 

The system operator can then examine the 
log for unusual patterns of file access Or 
other significant actions of the users that 
may indicate that unauthorized use is being 
made of the system. When it is possible to 
code certain unusual patterns of use, the log- 
ging system itself can be programed to 
watch for those events. It will then either 
send a warning to the system operator, or 
call on a special security surveillance pro- 
gram that collects as much detailed informa- 
tion as possible about the transaction. 

Operating Systems 

The operating system of a computer, the 
set of programs that control its work, is the 
fundamental piece ot software on which all 
other application programs depend. Conse- 
quently, the integrity of the operating 

ERIC 



system is a necessary prerequisite for any 
other software security. Although no system 
can be designed to be perfectly secure, there 
is much that can be done to construct highly 
secure systems. 

R&D is ongoing in this area, and results 
will be slowly incorporated into existing 
systems. However, progress will be hindered 
by the difficulty in adapting current op- 
erating system programs. These contain mil- 
lions of instructions, and have been modified 
and expanded over several years by many 
programers. The systems are difficult to 
change, as are the habits of their users. 

Some computer installations still use 
operating systems written nearly 20 years 
ago. Computer operators fear that disrup- 
tion and trauma would result from adopting 
radically different operating systems, and 
manufacturers resist compromising invest- 
ments amounting to billions of dollars that 
they have made in existing programs. Thus, 
the most acceptable new techniques over the 
short term will be those that can be adapted 
to existing systems. However, it is the very 
size, complexity, and growth history of these 
current systems that create their greatest 
weaknesses— the logical holes and flaws 
through which a determined outsider can 
gain access. 

Data Base Security 

As data bases grow larger and are design- 
ed to serve multiple purposes, the likelihood 
increases that system operators will want to 
grant selective access. The problem is dif- 
ficult. In an employee data base, for exam- 
ple, it may be desired to allow the personnel 
department access to some records, the fi- 
nance department to others, and the medical 
department to still others. 

One of the major problems is that of 
authorization determining which user can do 
what. Another related issue is how to struc- 
ture the data base to allow such authoriza- 
tions to be enforced. The question ot which 
controls are even possible is, in itself, a com- 
plicated one. Research in data structures is 
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developing new techniques which will prob- 
ably come into use rapidly as new data base 
systems come on the market. 

Encryption is one technique that will be 
used increasingly in cases where different 
groups of data and their users can be easily 
partitioned in terms of access control. It will 
be less useful when the data are highly in- 
tegrated, and when it is not known during 
the design stage where boundaries will even- 
tually be drawn. 

Years ago, some hope was placed in the 
use of so-called "aggregated files," par* 
ticularly when used for research with sen- 
sitive personal data. These files supposedly 
eliminate problems associated with main- 
taining personally identifiable data by strip- 
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ping off identifiers and lumping them to- 
gether in statistical clusters. It has been 
shown, however, that aggregating data sta- 
tistically does not always assure that a 
clever inquirer cannot reverse the process 
and derive substantial personal information. 
In the same way, merely stripping identifiers 
oft records of personal information may not 
preserve the integrity of the information, for 
a surprisingly small amount of descriptive 
information can serve to identify an individ- 
ual uniquely. R&D is being conducted on 
ways to transform data bases collected for 
social research purposes so that the individ- 
ual information is completely obscured, but 
statistically relevant calculations can still be 
done. 



14:; 



Chapter 14 

Industry Structure 



1,>U 



Contents 



Introduction .... .... ... 147 

Computer Hardware US 

•\uxihary Equipment . 151 

The Data Communication Industry ... 154 

Special Applications . . . . 157 

Computer Services 160 

Information Services . . Ifi;} 

LIST OF TABLES 

/./'« V> . Paw 

9 Top lit) KDP Companies in 1979. . . . 147 

10 Computer Industry Structure 149 

1 1 Desktop and Personal Computer 1980 Worldwide Shipments . ... 150 

12. Minicomputer and Small Business Computer 1980 Worldwide 

Shipments 150 

1 i. Computer Mainframe 1980 Worldwide Shipments 150 

1 4 Auxiliary Equipment Industry Structure 152 

1 5 Data Communication Industry Structure 155 

lb. The Ranking and Revenues of the Top 10 Manufacturers of 

Data Communication Hardware 157 

1", The 10 Leading Carriers of Digital Data and Their Data 

Communication Revenues 157 

\> } Special Applications Industry 159 

19. The Computer Services Industry Structure 161 

20 Estimated 1979 Revenues for the Top Five Independent 

Computer Service Companies 162 

21. Industry and Revenue Structure of Computer Services Industry 162 

22 The Information Services Industry Structure 166 



ERLC 



Chapter 14 

Industry Structure 



Introduction 



In less than 30 years the electronic data 
processing (^DP) industry has grown to be a 
major economic sector of the economy. The 
total revenues for the industry worldwide 
were estimated to have been over $60 billion 
in 1979. The U.S. industry share of this mar- 
ket was about $46 billion. 

The top 20 domestic companies in the 
EDP business in order of size are listed in 
table 9. Some of these firms are also engaged 
in other types of business, but only their 
EDP revenues are shown. The total EDP 
revenues in 1979 of the leader, IBM, were 
over $18 billion, nearly eight times those of 
the next largest company, Burroughs. Reve- 
nues of the eighth company, Hewlett-Pack- 
ard, were nearly twice those of the ninth, 
Memorex. 

The top eight companies are those market- 
ing full Hnes of general purpose computers, 



referred to in both the industry and this 
report as mainframe computers. The rest 
succeed, in general, by focusing on a more 
limited market sector— very small machines, 
very large machines, specialised peripheral 
hardware, or various types of computer serv- 
ices. 



in this study 
the market is 



The companies examined 
range widely in size. While 
clearly dominated in terms of size by the top 
eight (70 percent of the total revenues), 
much of the significant market shifting and 
innovation that will affect the future of com- 
puter use are taking place among the smaller 
companies. It has been estimated that there 
are over 4,000 firms in the^EDP industry. 

Growth in the hardware side of the indus- 
try will continue but not spectacularly. Rap- 
idly decreasing prices for hardware will be 
more than offset by increased sales. How- 



Table 9.— Top 20 EDP Companies in 1979 







1979 EDP 








revenues 


Domestic 


Rank Company 


<$ million) 


market 


1 


IBM 


$18,338 ' 


46°o 


2 


Burroughs 


2,434 


59 


3 


NCR 


2,404 


46 


4 


Control Data 


2 273 


68 


5 


Sperry Rand 


2 270 


55 


6 


Digital Equipment 


2 032 


62 


7 


Honeywell 


1 453 


67 


8 


Hewlett Packard 


1 030 


52 


9 


Memorex 


664 


51 


10 


Data General 


540 


73 


1 1 


Storage Technology 


480 


88 


12 


Xerox 


475 


85 


13 


TRW 


440 


77 


14 


Texas Instruments 


425 


82 


15 


Computer Sciences 


415 


88 


16 


Automatic Data Processing 


401 


92 


17 


GE 


350 


79 


18 


Electronic Data Systems 


312 


96 


19 


JM 


310 


81 


20 


Northern Telecom 


300 


65 



Percentage 

Principal 
product 
Mainframe computers 
Mainframe computers 
Main-frame computers 
Mainframe computers 
Mainframe computers 
Mainframe computers 
Mainframe computers 
Minicomputers 
Memories 
Minicomputers 
Memories 
Peripherals 
Services 

Minicomputers terminals and 

consumer goods 
Services 
Services 
Services 
Services 
Peripherals 
Peripherals 
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ever, those companies using new computer 
and communication technologies to provide 
innovative information services to individ- 
uals and business will grow the most rapidly. 

The advent of the microcomputer and low- 
.cost digital communication opens new op- 
portunities to entrepreneurs. Microproces- 
sors lower the cost of system implementa- 
tion to a mass-marketable level; and readily 
available, inexpensive communication tech- 
nology provides a mechanism for mass dis- 
tribution that has been lacking in the past. 

These developments do not necessarily 
imply that the principal participants will 
change drastically over the next 10 years. 
The large EDP and communication corpora- 
tions have been highly adaptable, and can be 
expected to move into these new services. 
The traditional information firms, research- 
ers, and publishers are merging with the 
newer, high technology computer and com- 
munication companies. For example, ABC 
has bought MacMillan Press. On the other 
hand, Dun & Bradstreet, an established 
retailer of information, has purchased Na- 
tional CSS, Inc.. a major supplier of com- 



puter programing and time-sharing serv- 
ices, and Readers Digest has purchased The 
Source, a new on-line information service. 

This emergence in the 1980's of technol- 
ogy-based information service industries as 
a major business sector is significant both 
with respect to an overall analysis of market 
trends and for this assessment. The nature 
and social consequences of these new serv- 
ices are likely to have a major impact on Fed- 
eral policies concerned with information and 
information processing. The form and avail- 
ability of these services will, in turn, be af- 
fected by Government policy. 

A final important characteristic of the 
U.S. computer and communication industry 
is its major role in the international market. 
International sales are concentrated among 
the top nine corporations, which average 
from 40 to 50 percent of all the foreign sales. 
The smaller firms are much less active inter- 
nationally, probably because they view the 
domestic market as adequately rewarding 
and because of the high cost and uncertainty 
surrounding the marketing of high technol- 
ogy abroad. 



Computer Hardware 



The computer industry has been highly 
segregated along product lines for some 
time. Several companies manufactured so- 
called "super computers." Along with a few 
other firms, they produced a full line of small 
to large systems. Others specialized in 
minicomputers. However, the lint& between 
these major categories have blurred as many 
intermediate size systems, both general and 
special purpose, have arisen to fill the gaps. 
The needs of computer users have also 
shifted substantially, creating more op- 
portunities for small specialized companies 
to develop 

This evolutionary shifting of products, 
producers, and user needs makes difficult 
any attempt to chart historical trends for a 
particular class of machine For example, the 



minicomputer of today is, in some ways, 
more powerful than a large computer of 
several years ago. Companies such as Texas 
Instruments, that used to sell only electronic 
components for computers, now market en- 
tire systems. 

The principal characteristics of the com- 
puter hardware industry are summarized in 
table 10 (also see tables 11, 12, and 13). For 
analytical purposes, the industry has been 
divided into six sectors. Although the 
boundaries between them are vague, these 
sectors are generally recognized by the in- 
dustry. 

The principal eharacteristics^of change in 
the computer hardware industry are the fol- 
lowing* 



Table 10.— Computer Industry Structure 



Characteristics of hardware 
Microcomputer 

The smallest sized computers 
can fit on one Circuit board 
and so.jn on a single silicon 
chip, inexpensive 
t 



Purpose and/or use 

Used as ' intelligent compo 
nents for games, appliances 
watches, etc or as the heart 
of larger general computing 
systems 



Personal or desktop computer (see table 1 1 ) 

Small but fully capable com 
outer systems costing sever 
at hundred to a few thousand 
dollars 

Minicomputer (see table 12) 

Small computer systems sell 
mg for less than $50 000 



Mainframe computer (see table 13) 

Medium- to large scale com 
puter systems, costing from a 
few hundred thousand dollars 
to several millions 

Plug compatible computer 

Electronically equivalent to the 
equipment of other manutec < 
turers-usually IBM 



Supercomputer 

Extremely large powerful com 
puters 



For use by individuals in the 
home in business or in 
schoot 



Designed to be used for a ded 
fcated set of applications with 
informal hands on access 



General purpose computers 
usual!/ serving several users 
and applications 



Same as above but with poten 
tiaily better performance bet 
ter deliver or lower price 
than IBM offers 



Predominantly for scientific 
and technological applica- 
tions requiring large amounts 
of computing and data analy- . 
sis e g meteorological fore 
casting 



Nature of present industry 

Modest to small companies in 
terms of electronic data proc 
essing reve iues 



Many small entrepreneurs— a 
cottage industry Very sue 
cessful entry by a consumer 
electronics retailer,,Tandy 
{Radio Shack) 

Mix of large and small com- 
panies Has provided opportu 
nities for new entrepreneurs 
such as Prime Computer 



Dominated by several largo 
corporations with IBM the 
revenue leader by a wide 
margin 



A very few companies corn_ i 
t rating narrowly on particular 
market opportunities 



A few companies—most spe 
cialize in this type of System 



Nature and size of 
present market 

Growing rapidly, over $1 billion 
by the early 1980 s United 
States leads with increasing 
competition from West Ger 
many and Japan 



Individual users Storefront and 
mail order saies 1979 sales of 
$500 million 



Shipments of $4 3 billion in 
1979 Worldwide market 
growth »ate for past several 
years of 35 percent 



The bulk of general computer 
sales— $8 billion in 1979 



Appears to be surviving new 
IBM product announcements 
and growing Strongest 
growth is in specialized sys 
terns 



Small specialized market esti 
mated at about $500 nnllion 



Future trends 

Growth rate between 30 to 40 
percent per year Sales 
growth from $100 million in 
19^7 to $1 billion in early 
1980 s Small firms being ac 
quired by large international 
conglomerates 

Explosive growth of market in 
next few years Possible ac 
quisition by large consumer 
product firms and retailers 
emulating Tandy success 

Growth rate will slow to 25 per 
cent per year relative flatten 
mg of market in 1980 s. soft- 
ware gaming in importance 
Fewer new entrants 

Continued steady growth, with 
no major changes in relative 
positions of the top seven 
companies Increased foreign 
competition 

Risky market very sensitive \o 
IBM product and price an 
nouncements Not likely to - 
become a significantly large 
•ndustry, but to prod big com 
panies through competition 

Market growing more diversi- 
fied Will continue to be im- 
portant but relatively small 
IBM may bring in a totally 
new system potential growth 
of foreign saies 
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Table 11.— Desktop and Personal Computer 
1980 Worldwide Shipments 



By units 


AAA OOO iimlc tntnl 


Tandy-Radio Shack 


C J - 


Commodore 


23 


Apple 


17 


Hewlett Packard 


6 


IBM 


2 


Others 


27 


By revenue 


St 9 b. hon 


Hewlett-Packard 




Apple 


10 


IBM 


9 


Tandy-Radio Shack 


7 


Tektronix 


3 


Others 


50 







Table 13 —Computer Mainframe 
1980 Worldwide Shipments 3 



Revenues 





Corn pan ^ 


($ millions) 


Percent 


1 


IBM 


$10 650 


62 4 s , 


2 


HIS 


1 550 


9 1 




Sperry Umvac 


1 410 


8 3 


4 


Burroughs 


1 000 


59 


5 


NCR 


480 


2 8 


6 


CDC 


400 


2 3 


7 


Amdahl 


380 


2 2 


b 


DEC 


205 


1 2 


9 


National 


190 


1 1 


10 


Cray 


50 


0 3 


1 1 


Magnuson 


35 


0 2 


12 


I PL 


10 


0 1 




Compatible peripherals 


700 


4 1 




Totals 


$17 060 


100 0% 



Table 12 —Minicomputer and Small Business 
Computer 1980 Worldwide Shipments 



Minicomputer* 




By umts 


137000 units 


Digital Equipment Corp 


44 -c 


Data General 


1 4 


Hewlett Packard 


8 


IBM 


7 


HoneyweM Information Systems 


4 


Others 


23 


By revenue 


16 35 billion 


Digital Equipment Corp 


34'- 


Hewlett Packard 


16 


Data Genera! 


1 1 


HoneyweM Information Svstpm^ 


7 


(BM 


6 


Others 


?j 


. Small business computer 1 * 




By units 


7 J 000 units 


IBM/ r 


33% 


Others 


23 


Digital Equipment Corp 


12 


National Cash Register 


1 i 


Wang- 


8 


Burroughs 


7 


oha General 


6 


'fly revenue 


$3b'ltion 


Others 


33- 


IBM 


28 


National Cash Register 


10 


Wang 


?0 


Digital Equipment Corp 


8 


Burroughs 


7 


Data General > 


4 







• The mainframe business is still the ma- 
jDr component of computer sales and 

* will be for the foreseeable future. IBM 
has the largest market share by far, and 
there is no evidence that its iead is 
shrinking. 

• The growth rate for sales of very small 
systems— desk-top or personal comput- 
ers—wilt be very high, while the histori- 
cally high rates of growth for larger sys- 
tems will level off somewhat. 

• In response- to the changing nature of 
the computer marketplace, more em- 
phasis will be placed on retail marketing 
and customer services. Retail firms not 
traditionally associated with computers 
will enter the small computer field. 

• The explosive growth of the microproc- 
essor industry may be slowed by limited 
production capacity and by the increas- 
ingly high costs of design and tooling 
for new applications. 

• There has been recent evidence of a 
trend toward acquisitions of small semi- 
conductor companies by large firms. 
According to one report, of 36 new semi- 



conductor companies formed since 
1966, only seven remain independent. 
Many of, the acquisitions have been by 
foreign firms: French, West German, 
Japanese, Canadian, and Dutch. 
• While foreign competition has made 
some inroads in electronics sales, and 
computer manufacturers are wary, par- 
ticularly of Japanese competition, no 
evidence of any substantial impact on 
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the domestic computer hardware mar- 
ket exists at present. The microproc- 
essor and personal computer markets 
seem to be most vulnerable to such 
threats. 

• Particularly in the small machine and 
special application markets, there ap-, 
pears to be wide opportunity for entre- 
preneurs to innovate and make a suc- 
cessful market entry. 



Auxiliary Equipment 



Many companies have successfully com- 
peted in the computer market by providing 
the peripheral equipment—terminals, memo- 
ries, and the like— that extend the capabil- 
ities of existing computer systems. This in- 
dependent peripheral market can be roughly 
divided into two parts— equipment in direct 
competition with that offered by the system 
vendor, and specialized hardware not com- 
monly manufactured by the mainframe com- 
panies. 

Most mainframe computer companies sell 
a wide range of peripheral devices for in- 
formation storage and for input and output 
of dat i. However, other manufacturers claim 
that by specializing in some specific cate- 
gory of device they can offer better quality 
at a lower price. Often, in fact, these units 
are sold to the computer system manufac- 
turer, which in turn puts its own name on 
them. The total auxiliary equipment market 
is estimated at around $7 billion or more. 
Thus, even though the major mainframe 
manufacturers take a large portion of that 
market, the remainder is well worth com- 
petingfor. 

The categories of equipment shown in 
table 14 below are not a complete list. The 
range of accessory equipment sold for com- 
puters is extremely wide. 

The industry for auxiliary equipment has 
the following principal characteristics: 



• All of the major manufacturers offer a 
wide assortment of peripheral equip- 
ment for use with their systems, and 
the sale of this equipment constitutes a 
major portion of the market. However, 
^here is an active and profitable group 

„ of independent manufacturers selling 
equipment of all types. In many cases f 
the large computer corporations have 
an agreement, whereby they purchase 
this independent hardware and put 
their own brand name on it. 

• Users are more likely to accept new and 
improved devices as they come on the 
market, because it is much easier to 
change auxiliary equipment with mini- 
mum disruption of their operations. 
Furthermore, different auxiliary equip- 
ment can perform an identical function 
with a greater variety of possible inter- 
nal technologies and designs. These two 
advantages lead to market opportu- 
nities for inventors and, hence, to profit- 
able new enterprises. 

• Much of the interest in the area of data 
storage is concentrated on large and in- 
expensive bulk memories. Current ac- 
tivity is in bubble memory and floppy 
disk technology, although the use of the 
video disk for very cheap data storage 
is also being explored and appears likely 
in a few years. 

• The terminal industry is growing quick- 
ly, matching the growth in the M se of 
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Random access memory devices 
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Table 14.— Auxiliary Equipment Industry Structure 



ibi Hopp* disks 



»n tte/y torge memories 
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braphical display equipment m Video graphics 
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Table 14.— Auxiliary Equipment Industry Structure (continued) 
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Printers 
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Min'rdme manufacturers dominate 
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communication-based computer appli- 
cations. The current trend is toward 
graphical display, and putting more 
computer processing logic in the ter- 
minal itself. 
• Data entry has been moving gradually 
away from the use of punched cards and 



toward the use of other media such as 
magnetic disks. The most significant 
trend in the 1980"s will be toward sys- 
tems designed to capture information 
directly from the source by voice recog- 
nition, by image analysis, and by direct 
measurement. 



The Data Communication Industry 



The data communication industry pro- 
duces goods and services necessary to 
transmit digital data between computers or 
befcweea computers and a terminal. For con- 
venience, the industry is split into two sec- 
tors, the hardware manufacturers and the 
carriers, as shown in table 15. (The descrip- 
tion of the industry presented in this study 
presents an information processing view. 
The OTA report on Telecommunication 
Technology and Public Policy, in press, 
presents a common carrier view of the data 
communication industry.) 

T he magazine Datamation estimates the 
total data communication industry to be 
running currently at over $4 billion per year, 
and to be growing rapidly. The carriers have 
most of the action, nearly three-quarters cf 
the market; AT&T has the biggest individ- 
ual share, about 56 percent of the total mar- 
ket. The top 10 companies (other than 
AT&T) in the data communication hardware 
market are listed in table 16, and the top 10 
data carrier;* in table 17. All revenue esti- 
mates are from Datamation. 

The following comments about the data 
communication industry appear pertinent: 

• The most apparent characteristic of the 
data communication hardware market 
is the continued presence of IBM at the 
top of the list. Even though only one 
product covered in the survey is offek ed, 
a communication front-end processor, 
IBM's revenues are more than double 
those of the next largest company. Yet 
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this income represents less than 1 per 
cent of IBM's total corporate income. 

• There appear to be many healthy small 
firms in the communication hardware 
business. Generally, they specialize 
very narrowly along specific product 
lines. Six of the 10 companies listed in 
table 16 are small firms earning most or 
all of their income in the data commu- 
nication field. 

• The entire market for data communica- 
tion is still not very large compared 
with that for other services, principally 
voice. It is estimated at between $2 
billion and $3 billion. Accurate numbers 
are hard to get, because the carriers 
themselves do not always know when 
their lines are being used to carry voice 
or data. 

• Most experts expect a major explosion 
of the market for data communication 
over the next two decades. The most in- 
teresting developments are the plans of 
some very large corporations for pro- 
viding sophisticated data communica- 
tion services in the near future. Al- 
though behind schedule, AT&T's ACS 
(Advanced Communications System), 
should begin operation socn. IBM and 
Aetna are underwriting a new corpora- 
tion. SBS (Satellite Business Systems), 
to provide such services. Exxon is re- 
puted also to be planning services of 
this kind. A highly flexible system will 
be offered by these companies that is 
designed specifically for high-speed 
data transfer in many forms— e.g., com- 



Table 15 — Data Communication Industry Structure 
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Table 15.-Data Communication Industry Structure (continued) 
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Table 16 .—The Ranking and Revenues of the 
Top 10 Manufacturers of Data 
Communication Hardware 



Rank 


Company 


1 


IBM 


2 


Racal Mtlgo 


3 


NCR 


4 


Motorola 


5 


Memorex 


6 


3M 


7 


General Datacom 


8 


Paradyne 


9 


Control Data 


10 


Rixon 



1979 
revenues ($ mil 

$158 
121 
82 
81 
54 
49 
42 
41 
40 
36 



ion) 



SOURCE Ddttmiuo > 



Table 17.— The 10 Leading Carriers of Digital Data 
and Their Data Communication Revenues 





1979 


Rank Company 


revenues {$ m 


1 AT&T 


$2,309 


2 GTE 


798 


3 Western Union 


451 


4 ITT World Communications 


170 


5 United Telecommunications 


68 


6 TRT 


28 


7 Tymnet 


24 


8 Continental Telephone 


21 


9 Central Telephone 


20 


10 WUI 


16 
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puter data, electronic mail, facsimile, or 
video teleconferencing. 
• These services will be based on commu- 
nication networks that will have sub- 



stantial "intelligence" built into them; 
thus, the services will not easily be 
classified as pure data carriage or as in- 
■ formation processing. Since one indus- 
try (communication) is regulated and 
the other (data processing) is not, a com- 
plicated regulatory problem is created, 
the resolution of which will allocate « 
multibillion dollar market among com- 
peting industrial giants. 

• The computer industry has two strong 
but contradictory reactions to these 
developments. They see the evolution of 
these new services as providing exciting 
possibilities for new computer-com- 
munication applications, some linked on 
a worldwide scale. Many of the new ap- 
plications being planned will serve large 
multinational corporations or consor- 
tiums of smaller users, such as stock- 
brokerage houses. 

On the other hand, some fear that a big 
winner of this competition for the data com- 
munication market would be a monopoly 
controlling all data communication services 
worldwide. While the carrier business is not 
a game for small players, such massive domi- 
nation by one supplier could be threatening 
to the hardware and service sectors that are 
currently promising for the creative small 
business entrepreneur. 



Special Applications 



The emergence of microprocessor technol- 
ogy has led to a new type of industry that in- 
corporates the processor into a device that 
performs a specialized function. This type of 
industry will grow rapidly during this dec- 
ade, fueled by growing consumer demand for 
computerized products. Eventually, such 
markets for computers may dominate the in- 
dustry and become analogous to those for 
electric motors. Few consumers purchase 
them directly, but buy many products in 
which they are incorporated. 



Some of these products will be full com- 
puter systems programed to perform spe- 
cific jobs; for example, the word processing 
applications discussed later. Others, such as 
the popular computer games, incorporate in- 
telligence but do not look like computers. 
These applications are also distinguished 
from the incorporation of microprocessors in 
common consumer goods such as microwave 
ovens and automobile engines. The applica- 
tions discussed here are new products, offer- 
ing new, intelligence-based capabilities to 
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their users. It is impossible to describe such 
an industry generieally; therefore a few cur- 
rent examples are provided {see table 18) 
that illustrate the variety of ways in which 
this set of industries will develop Clearly, 
the opportunities are endless for inventive 
Movel applications of this new technology 
The analogy mentioned above with the elec- 
tric motor is particularly useful in picturing 
the future potential of this industry sector 

Array Processors: An array processor is a 
special purpose computational unit designed 
to solve specific types ot mathematical prob- 
lems. (Seech. .*>.} It is normally attached to a 
general purpose computer system or mini- 
computer that sets up the data, feeds the 
problem to thearra\ processor, and puts the 
answer out in appropriate form. Array proc- 
essors have become particularly popular for 
research and engineering applications that 
involve signal processing or the modeling ot 
large physical systems. 

Over 15 firms market these units, ranging 
from IBM to small companies tor which such 
a processor is the only product. The proc- 
essors cost between S5.000 for a small unit 
on a printed circuit card to several million 
dollars for Control Data's Star computer. 
Many small companies (such as Floating 
Point Systems) and larger ones (such as Ray- 
theon and Westinghouse). which don't 
engage in the general purpose computer 
business, have found the lower end (up to 
SI 50.000) of the array processor market to 
be attractive, and have thus far successfully 
competed in it. 

Speak and Spell' : This is a specific prod- 
uct invention of Texas Instruments, which is 
a leading manufacturer of microelectronics. 
Unlike some of the other semiconductor com- 
panies, which sell their devices wholesale to 
other manufacturers for incorporation into 
products, Texas Instruments also produces 
a line of consumer devices that use their own 
electronics These are largely centered on 
electronic hand and desk calculators and a 
recently announced personal computer. 



In 1978, Texas Instruments produced a 
small hand-held device that combined their 
microcomputer technology with some new 
speech synthesis capabilities to produce a 
combination toy and teaching aid called 
"Speak and Spell 8 The device speaks a 
word and the learner types the word into the 
machine on a small keyboard. "Speak and 
Spell 3 " was an instant success, encouraging 
Texas Instruments to plan not only im- 
proved \ersions of the original but to find 
other specialized products that combine 
speech synthesis and microcomputers. 

Translators: The hand-hold language 
translator is a new consumer device that has 
been appearing in the stores over the last 2 
years. It resembles a pocket calculator but 
has an alphabetic keyboard and a somewhat 
longer display window. A person types in a 
word or phrase in one language and reads the 
translated phrase on the display. 

The machine was invented by a small 
group of entrepreneurs who were not in the 
electronics business at the time. Forming a 
company called "Friends Amis." they devel- 
oped the design and specifications of the 
logic chip required. They then contracted 
with a microprocessor manufacturer to pro- 
duce the specialized electronics, and ar- 
ranged with a distributor of consumer elec- 
tronics to retail them under the distributor's 
brand name. 

The translators were an instant hit. 
enough so that Texas Instruments and Lex- 
icon have been drawn into the market. 
Despite the competition. Friends Amis has 
been a success, turning an initial investment 
of $1 million into an $8 million profit last 
year on sales of $30 million. Still growing, 
the company soon plans to market a hand- 
held computer through an agreement with 
Matsushita. The Japanese corporation will 
provide the Marketing capability the small 
company lacks. Besides making money, 
Friends Amis has. in the words of Fortune 
magazine, "managed to father a new branch 
of consumer electronics. " 
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Table 18.— Special Applications Industry {examples) 
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Word Processing Systems: These are im- 
portant new applications around which a ma- 
jor industry will grow in the 1980 s. Word 
processing systems, the first entry in the of* 
fice automation trend, are designed to in- 
crease the productivity of information han- 
dling by automating its preparation and 
flow. The applicable technologies will be 
drawn from both computers and communica- 
tion, and the trend will be toward the in- 
tegration of document preparation, storage, 
and transmission 

For now, the principal offering on the com- 
puter side is the word processor. It is essen- 
tially a computerized, intelligent typewriter 
that stores a document electronically as it is 
entered, displays the image on a cathode ray 
screen, and allows the operator to edit and 
correct the text directly in its memory. 
Tedious tasks such as rppagination, hyphen- 
ating, and justification are taken care of 
-^automatically. Some systems even correct 
spelling, and some observers expect systems 
in the 1980s to display sophisticated in- 
telligence for correcting grammar and for- 
matting complicated text. The market for 
sophisticated word processing systems grew 
over 80 percent last year, and next year 
market growth should still be over 50 per- 
cent. 

The principal actors in the word process- 
ing business have tended to be companies 
that make or have made computers, such as 
Wang, IBM. and Digital Equipment Corp. 
However, other firms are now entering the 
market, illustrating the opportunities for 
new entries being opened by cheap elec- 
tronics. Lanier Business Products, for exam* 
pie, a leader in the sale of dictaphones, has 



entered with both stand-alone systems and 
those using a shared computer that serves 
several terminals. Lanier, principally viewed 
as a firm with marketing expertise, pur- 
chased interest in a small data products com- 
pany, AES Data Ltd., that designs and man- 
ufactures the word processing equipment. 

The most important trend that experts 
think will dominate in the 1980 s is the merg- 
ing of these word processing systems with 
the new data communication services being 
planned, such as SBS or AT&T's ACS, 
Using these new services, geographically 
distributed organizations will be linked 
together through a very high speed data 
communication network offering video and 
audio conferencing, computer conferencing, 
and distributed information processing. 

The final ingredient for the integrated of- 
fice systems of the next decade is the devel- 
opment of electronic archival storage. The 
hardware base exists for storing information 
at a cost lower than that of filing paper. The 
need now is for appropriate software that 
would allow the user to store and retrieve in- 
formation efficiently and easily. Some sys- 
tems are on the drawing broad. Systems De- 
velopment Corp. and Datapoint have an- 
nouis.ed prototypes for systems they will 
sell iii a ^ *r or so. 

As these trends merge, whether small 
firms can continue to successfully develop 
and compete in the word processing market 
may depend on the degree to which inter- 
faces become standardized, allowing com- 
petition for particular components of an in- 
tegrated office system. Major firms such as 
Xerox, IBM, and Exxon have taken aim at 
the automated office market, and competi- 
tion will be severe. 



Computer Services 



The computer services industry, sum- 
marized in table 19, performs a wide variety 
of tasks that make the computer more ac- 
cessible, more usable, and or less expensive 



for computer users. Some companies sell 
time on their own computers; others provide 
programing or operations services (including 
training, consulting, and facilities manage- 
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Table 19.— The Computer Services Industry Structure 
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ment) to users who own their systems. Still 
others sell prewritten programs or provide 
access to those programs on a service bureau 
computer. Most recently, some companies 
offer processing services through integrated 
hardware software systems. 

The Association of Data Processing Serv- 
ice Organizations (ADAPSO) is the principal 
organization representing this industry. 
They define the role of their industry as add- 
ing "value to the computer hardware utiiitv 
by integrating into the s ?rvice people, exper- 
tise, products, distribution networks, and 
education." The structure of the computer 
service industry as discussed here reflects, 
in part, that used by ADAPSO. 

The largest publicly held independent 
computer service corporations along with 
their estimated 1979 revenues from com- 
puter services are shown in table 20. 



Table 20 Estimated 1979 Revenues for the 
Top Five Independent Computer 
Service Companies 3 



Compan, 

Automatic Ddt rt Pr-» e-^smq 
Computer Scten( es Corf 
Electronic Data Systems 
Tymesharp 
Bradford Nationa 



Estimated 1979 
'evp'vjn^ ( $ mil horn 

$37? 

274 

193 
120 



Table 21 shows the structure of the com- 
puter services industry in terms of size of 
firm. 

The following observations can be made 
about the computer services industry: 

• The availability of inexpensive capable 
computer hardware will put pressure on 
service firms that only provide custom- 
ers with access to computer time. Even 
so, most observers do not expect the 
computer service bureaus to fold up. 

• The service bureaus are showing a trend 
toward offering an integrated set of 
services based not only on access to 
pure computing services, but also to 
specialized programs and data bases 
already present in the company's 
system. 

• The service industry seems to be char- 
acterized by a few large firms and 
many, equally profitable, very small 
operations serving very specialized 
markets (such as law firms, pharmacies, 
and civil engineering firms). The devel- 
opment of new data communication fa- 
cilities will make more of this type of 
specialized service possible by pro- 
viding a national marketplace for it. 

• A new industry will develop to support 
the personal and desk-top systems now 
being marketed. These services will of- 
fer maintenance, programs, consulting, 
and education specifically oriented to 
owners of these very smalf systems. 



Table 21 —Industry and Revenue Structure of Computer Services Industry* 



Over $25 mipion 

Between $10 miihoi and $25 miihc 
Between $2 million an-* St ? ™ 'i 
Under $2 million 

Total 

-i'" i Jm • ' 

SOUP' f- £ , , , ' . t ' 



Number of 
companies 

40 
70 
450 

4 ObO 



J97SJ revenues 
{$ bUhon) 

$ 4 0 

1 S 

2 0 
2 5 

$10 0 



1979 gross 
profit 
mdrg.n ipercen*j 

to « 

7 
9 
9 



Growth rate 
tpexent) 

21 
22 
22 
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Information Services 



Selling information is a centuries-old 
business; however, the computer is forcing a 
radical change in the character of this in- 
dustry. The nature of the information sold, 
the way it is provided, and the principal 
organizations supplying information serv- 
ices are all changing rapidly, which will 
shape a new type of industry in this decade. 

The traditional information industry has 
always been predicated on the assumption 
that some information has tangible economic 
value and can be treated as a commodity. 
The industry, taking this traditional ap- 
proach, views itself as similar to any other 
industry in structure. That is, it is divided 
into producers, distributors, and retailers. 
For example, an author might be a producer, 
a publisher, a distributor, and the bookstore 
the retailer. Similarly, in broadcasting there 
are show producers, networks and syndi- 
cates that distribute the programs, and the 
local stations that broadcast them into 
homes. 

Now the industry is computerizing. Tradi- 
tional information organizations such as 
Dun & Bradstreet, Macmillan Press, and the 
Knight-Ridder newspaper publishers are ex- 
ploring new uses of information technology 
to expand their offerings. On the other hand, 
computer service bureaus, as pointed out in 
the previous section, are moving away from 
offering pure computer time and toward pro- 
viding program and data services that are 
certainly classifiable as information services 
even by the most traditional standards. 
Finally, new companies such as Data Re- 
sources, Inc. (now part of McGraw-Hill) 
have been formed specifically to provide 
computer-based information services. The 
computer's impact is being felt by all three 
sectors of the information industry. 

In the production of information, in- 
creased computerization of social activities 
means that there is a swiftly growing pool of 
information of all kinds that can be read by a 
computer. Financial information, airline res- 



ervations, stock transfers and commodity 
prices, and even wire service news, are ex- 
amples of information already available in 
electronic form. Much of it is already trans- 
mitted on communication lines. 

The next decade or two will see most of 
the information needed to run people's lives 
and businesses originated and stored in com- 
puters. This trend will stimulate the dis- 
tribution and retailing of information, be- 
cause putting the information into computer 
readable form is a major cost of current 
automated information services. 

Data communication technology is chang- 
ing the rules for the distribution of informa- 
tion. Traditional distributors such as broad- 
cast networks, book publishers, and common 
carriers are looking carefully at the potential 
advantages offered by data communication. 
The publishers see a new mechanism to dis- 
tribute newspapers, books, and magazines, 
in addition to possible new services; the com- 
mon carriers and broadcasters see new uses 
for their facilities as vehicles for these 
services. 

Many of these services will soon be re- 
tailed directly to the home or office via 
telephone, television, and cable. Precursors 
to these services already exist in a few local 
cable systems, and experiments such as the 
recently canceled AT&T Electronic Informa- 
tion Service provide an automated telephone 
directory and a selection of other informa- 
tion systems over a telephone line to a home 
terminal. 

Some information services are trans- 
formed by the use of technology, others are 
created. It is the new computer-based serv- 
ices that are of particular interest to this 
study. 

The Information Industry Association 
identifies nine categories of information in- 
dustry. These are: 

1. producers of primary information 
(books, journals, research studies, etc.); 
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2. producers of secondary information (in- 
dexes, bibliographies, data bases, mi- 
croforms, directories, etc.); 

3. communication companies (broadcast, 
cable, switching, etc.); 

4. information distributors, agents, or 
brokers (on-line service, sales represent- 
atives, dealers, etc.); 

5. information transactors (banks, lending 
institutions, investment houses, etc.); 

6. consultants or contract suppliers of in- 
formation (designers, developers, etc.); 

7. information retailers or outlets (on- 
demand services, search services, etc.); 

8. equipment or supplies companies (com- 
puters, micrographics, text processing, 
graphic arts, etc.): and 

9. popular media organizations (news, edu- 
cation, advertising, etc ) 

Some of these classifications are of par- 
ticular interest to the computer and com- 
munication industry. 

Producers of Primary Information: For 

some time, the intermediate processes of 
publishing have been undergoing auto- 
mation. Computerized typesetting, on-line 
editing and other uses of word processing, 
and digital communication of edited text are 
being widely adopted and should increase 
productivity substantially. 

For the time being, the final product will 
continue to be in paper form. However, the 
future widespread use of the video disks and 
high-speed data communication systems 
may gradually lead to products being pub- 
lished in digitized formats as well. 

Producers of Secondary Information: 
Many producers of bibliographies and in- 
formation directories now regularly prepare 
them on computers. Some even offer the 
final product on-line from a computer. The 
user dials in from a remote terminal to get 
the desired information. 

These industries have found the computer 
to be useful not only to automate the more 
routine aspects f their operations, but also 
to provide more sophisticated analyses and 
customized arrangements of the information 



they maintain. Since a large on-line data 
base can be searched far more effectively by 
computer than by hand, the services pro- 
vided by such a producer are qualitatively 
different from those provided by a tradi- 
tional bibliographic service. 

Such information, however, is currently 
very expensive to prepare. Persons must 
first read the printed material, then analyze, 
index and otherwise .code it, and put it into 
machine-readable form. In the future, when 
most printed text will originate on computer- 
based text processors, automated computer- 
ized indexing systems will eliminate most of 
these tasks. 

This high labor cost, coupled with the fact 
that the initial significant market for such 
systems is the research community, means 
that most bibliographic systems now avail- 
able were originally supported, at least par- 
tially, by the Federal Qovernment. Some are 
now self-supporting, w*hile others continue to 
be subsidized, depending on their purposes. 
Bibliographic information is the hardest 
case, however. 

There have been some successful entre- 
preneurial experiments in providing other 
forms of on-line data service. Data Re- 
sources, Inc. (DRI) is one of the best known. 
Founded by the well-known econometrician, 
Otto Eckstein. DRI provides econometric 
data and access to sophisticated computer- 
based models to economists, particularly 
those in private industry. Most of the major 
corporations in the United States now 
subscribe to DRI's services. 

There are a number of such firms that 
have been founded to provide computerized 
databank services. Many are still quite 
small, specializing in particular types of data 
to serve narrowly targeted markets. The 
range of services is quite broad. One in- 
dustry analyst identified 22 different cate- 
gories of databank service. 

Data Transactors: There are many firms 
that create useful information in the course 
of their business, although they may not be 
in the primary information business. For ex- 



ample, banks, stockbrokers, airlines, and 
credit card companies all create transac- 
tional information. More and more of this im 
formation is in computer-readable form and! 
furthermore, is possibly valuable to some 
other party This firm or individual may be 
in a related business, or may have no connec- 
tion with the principal field of the original 
data collector. 

The market for such data is likely to grow 
significantly over the next decade. Pools of 
data from transactions will accumulate in 
computer systems, and new enterprises will 
spring up to collect, organize, and sell therr. 
The transactors will find that wholesaling 
their data pools to such firms will be a prof- 
itable side business. When that happens, 
pressures may well build to increase tho 
amount of information collected beyond that 
necessary to serve the immediate trans- 
action, thereby increasing the resale value of 
a company 's data pool. These firms will then 
become principal actors in the information 
industry. 

Information Retailers: Information re- 
tailers provide computerised information 
products directly to the business or private 
consumer. They may also he the producers, 
or they may simph retail other producers' 
products. So-called "videotext" service pro- 
viders, which offer in-home information over 
broadcast or cable television channels, usual- 
ly serve as brokers, making their facMity 
available to arvone who wants to provide an 
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information service, in the same way that a 
grocery store carries soup made by different 
producers. 

Many of the databank providers discussed 
in the section on secondary producers offer 
very complicated systems that require some 
training and experience to use. Therefore, 
these services are often provided through an 
intermediary, such as a consultant, librarian, 
or stockbroker. In a sense, these persons 
serve as retailers of the information service, 
marketing it to individual users. The charac- 
teristics of the information services sector 
are summarized in table 22. 

The following conclusions can be made 
about the information services sector: 

• Traditional information producers such 
as book publishers, newspapers and net- 
work broadcasters will be converting 
their services into computer and tele- 
communication-based offerings. 

• New information services will be trans- 
mitted to the home over telephone, 
cable, and broadcast carriers. Some of 
these services may be integrated with 
m-house computer systems and video 
disk and tape units. 

• Libraries will extend their services be- 
yond mere provision of books into offer- 
ing computer-based services. Such new 
activities may conflict with the new 
commercial in-house services mentioned 
above 
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Table 22 —The Information Services Industry Structure 
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Producers of primary information 

Pursued ' t, - J '-' ■i"-' 



MM* iO'or'TMttO'1 



Producers of secondary m formation 
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Information retailers 
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Mcs* 5<D<oq\iu*H sys'ems avdt'dD.e 
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pd't by the Fede'd 1 Gove rn ment 
becjuse their >mha' chtet ma r ket 
was the f esed r ih community Sorrp 
jie now se if suppor mq others de 
sending on the*f ^ pose continue 
''i De subsidized Data Resources 
>nc is i n pxjmo'e of a successfu' 
entrepreneur^ e*penmen? in pro 
• idinq rther forms of on -me ddta 
sprvtcPs-Pconomet'iL ddta and ar 
rpss *d sop^s* L ated computer 
T.i^Pd ^odpts V economists Many 
^rrn * r-ns ha^e been ♦ounded 'i 
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f uturu trends 

Tnp increasing adoption of compuler'zed 
Wuesetimy on 'me editing and other 
uses ul word processing and digital 
communication of ed'ted text shou'd 
iuDstantialty increase productivity The 
future widespread use of video disks 
and niqh speed data communication 
systems may qraduaiiy iead to the pubi' 
L^ion-of products «n other diqit f ^ed for 
mats such as in home video information 
systems 

Mcs* of Ih'S data will reside in <omputer 
Systems to be caned up .is needed Dy 
Lusfo^ieri, 



Pools o f data from transactions 'Vil' ac 
cumulate in computer systems and new 
enterprises win spring up to collect 
O'qanize and sell them Transactors 
who profit from wholesaling their data 
poo's to such firms will be motivated to 
increase the quantity of information cof- 
'ened m order to raise the resale value 
of the.r data pools These firms will then 
become principal members of the in- 
formation industry 

Computer are having the effect of Olyrr 
mq the distinction between the products 
and services offered oy the computer in- 
dustry This new hybrid industry will of- 
*er new forms of information services 
marketed m new ways to new users 
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